gaim - denial of service

Two denial of service problems have been discovered in Gaim, a
multi-protocol instant messaging client. The Common Vulnerabilities
and Exposures project identifies the following problems:

• CAN-2005-1269
  A malformed Yahoo filename can result in a crash of the application.

• CAN-2005-1934
  A malformed MSN message can lead to incorrect memory allocation
  resulting in a crash of the application.

The old stable distribution (woody) does not seem to be affected.

For the stable distribution (sarge) these problems have been fixed in
version 1.2.1-1.3.

For the unstable distribution (sid) these problems have been fixed in
version 1.3.1-1.

We recommend that you upgrade your gaim package.