On Tue, 2004-01-27 at 18:40, Daniel van Eeden wrote: > Debian versions of gaim patched? > <http://security.e-matters.de/advisories/012004.html>
As observed by others on this list, I uploaded 0.75-2 earlier today with RedHat's patch. The security team are apparently dealing with the version in stable, although I estimate that over 70% of the code in Gaim has been rewritten since the version in stable was released. At first glance, it seems that a lot of the code referred to is new and the patch to the stable version will probably be quite small as a consequence. Furthermore, it's possibly quite irrelevant - Yahoo hasn't worked in the stable version of Gaim for months, nor MSN and possibly others, but because of the code changes I already mentioned it's hard to make this ancient version useful again, and a new version is probably too invasive a change for the same reason. The relevance of any work at this point on the stable package of Gaim is questionable... Regards, Rob p.s. I'm not on this list, please CC replies.
