[DSA 912-1] New centericq packages fix denial of service

CVS version numbers

english/security/2005/dsa-912.data: INITIAL -> 1.1 
english/security/2005/dsa-912.wml: INITIAL -> 1.1

2 files changed, 183 insertions, 0 deletions

diff --git a/english/security/2005/dsa-912.data b/english/security/2005/dsa-912.data
new file mode 100644
index 00000000000..4d3f7ec4e6a
--- /dev/null
+++ b/english/security/2005/dsa-912.data
@@ -0,0 +1,162 @@
+<define-tag pagetitle>DSA-912-1 centericq</define-tag>
+<define-tag report_date>2005-11-30</define-tag>
+<define-tag secrefs>CVE-2005-3694 Bug#334089</define-tag>
+<define-tag packages>centericq</define-tag>
+<define-tag isvulnerable>yes</define-tag>
+<define-tag fixed>yes</define-tag>
+
+#use wml::debian::security
+
+<h3>Debian GNU/Linux 3.0 (woody)</h3>
+
+<dl>
+
+<dt><source />
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1-1.1woody1.dsc />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1-1.1woody1.diff.gz />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1.orig.tar.gz />
+
+<dt>Alpha:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1-1.1woody1_alpha.deb />
+
+<dt>ARM:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1-1.1woody1_arm.deb />
+
+<dt>Intel IA-32:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1-1.1woody1_i386.deb />
+
+<dt>Intel IA-64:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1-1.1woody1_ia64.deb />
+
+<dt>HPPA:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1-1.1woody1_hppa.deb />
+
+<dt>Motorola 680x0:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1-1.1woody1_m68k.deb />
+
+<dt>Big endian MIPS:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1-1.1woody1_mips.deb />
+
+<dt>Little endian MIPS:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1-1.1woody1_mipsel.deb />
+
+<dt>PowerPC:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1-1.1woody1_powerpc.deb />
+
+<dt>IBM S/390:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1-1.1woody1_s390.deb />
+
+<dt>Sun Sparc:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.5.1-1.1woody1_sparc.deb />
+
+</dl>
+
+<h3>Debian GNU/Linux 3.1 (sarge)</h3>
+
+<dl>
+
+<dt><source />
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3.dsc />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3.diff.gz />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0.orig.tar.gz />
+
+<dt>Alpha:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3_alpha.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-common_4.20.0-1sarge3_alpha.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-fribidi_4.20.0-1sarge3_alpha.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-utf8_4.20.0-1sarge3_alpha.deb />
+
+<dt>AMD64:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3_amd64.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-common_4.20.0-1sarge3_amd64.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-fribidi_4.20.0-1sarge3_amd64.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-utf8_4.20.0-1sarge3_amd64.deb />
+
+<dt>ARM:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3_arm.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-common_4.20.0-1sarge3_arm.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-fribidi_4.20.0-1sarge3_arm.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-utf8_4.20.0-1sarge3_arm.deb />
+
+<dt>Intel IA-32:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3_i386.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-common_4.20.0-1sarge3_i386.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-fribidi_4.20.0-1sarge3_i386.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-utf8_4.20.0-1sarge3_i386.deb />
+
+<dt>Intel IA-64:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3_ia64.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-common_4.20.0-1sarge3_ia64.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-fribidi_4.20.0-1sarge3_ia64.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-utf8_4.20.0-1sarge3_ia64.deb />
+
+<dt>HPPA:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3_hppa.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-common_4.20.0-1sarge3_hppa.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-fribidi_4.20.0-1sarge3_hppa.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-utf8_4.20.0-1sarge3_hppa.deb />
+
+<dt>Motorola 680x0:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3_m68k.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-common_4.20.0-1sarge3_m68k.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-fribidi_4.20.0-1sarge3_m68k.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-utf8_4.20.0-1sarge3_m68k.deb />
+
+<dt>Big endian MIPS:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3_mips.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-common_4.20.0-1sarge3_mips.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-fribidi_4.20.0-1sarge3_mips.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-utf8_4.20.0-1sarge3_mips.deb />
+
+<dt>Little endian MIPS:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3_mipsel.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-common_4.20.0-1sarge3_mipsel.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-fribidi_4.20.0-1sarge3_mipsel.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-utf8_4.20.0-1sarge3_mipsel.deb />
+
+<dt>PowerPC:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3_powerpc.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-common_4.20.0-1sarge3_powerpc.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-fribidi_4.20.0-1sarge3_powerpc.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-utf8_4.20.0-1sarge3_powerpc.deb />
+
+<dt>IBM S/390:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3_s390.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-common_4.20.0-1sarge3_s390.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-fribidi_4.20.0-1sarge3_s390.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-utf8_4.20.0-1sarge3_s390.deb />
+
+<dt>Sun Sparc:
+
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq_4.20.0-1sarge3_sparc.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-common_4.20.0-1sarge3_sparc.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-fribidi_4.20.0-1sarge3_sparc.deb />
+  <dd><fileurl http://security.debian.org/pool/updates/main/c/centericq/centericq-utf8_4.20.0-1sarge3_sparc.deb />
+
+</dl>
+
+<p><md5sums http://lists.debian.org/debian-security-announce/debian-security-announce-2005/msg00313.html /></p>
diff --git a/english/security/2005/dsa-912.wml b/english/security/2005/dsa-912.wml
new file mode 100644
index 00000000000..74998ac1474
--- /dev/null
+++ b/english/security/2005/dsa-912.wml
@@ -0,0 +1,21 @@
+<define-tag description>denial of service</define-tag>
+<define-tag moreinfo>
+<p>Wernfried Haas discovered that centericq, a text-mode multi-protocol
+instant messenger client, can crash when it receives certain zero
+length packets and is directly connected to the Internet.</p>
+
+<p>For the old stable distribution (woody) this problem has been fixed in
+version 4.5.1-1.1woody1.</p>
+
+<p>For the stable distribution (sarge) this problem has been fixed in
+version 4.20.0-1sarge3.</p>
+
+<p>For the unstable distribution (sid) this problem has been fixed in
+version 4.21.0-4.</p>
+
+<p>We recommend that you upgrade your centericq package.</p>
+</define-tag>
+
+# do not modify the following line
+#include "$(ENGLISHDIR)/security/2005/dsa-912.data"
+# $Id$