Red Hat Security AdvisoryRHSA-2008:1023
pidgin security and bug fix update
Released 2008-12-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 finch-2.5.2-6.el4, finch-2.5.2-6.el4.i386, finch-2.5.2-6.el4.ia64 +33
- Red Hat Enterprise Linux Desktop (v. 5 client) finch-2.5.2-6.el5, finch-2.5.2-6.el5.i386, libpurple-2.5.2-6.el5 +9
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) finch-devel-2.5.2-6.el5, finch-devel-2.5.2-6.el5.i386, libpurple-devel-2.5.2-6.el5 +4
- Red Hat Enterprise Linux Desktop version 4 finch-2.5.2-6.el4, finch-2.5.2-6.el4.i386, finch-devel-2.5.2-6.el4 +15
- Red Hat Enterprise Linux ES version 4 finch-2.5.2-6.el4, finch-2.5.2-6.el4.i386, finch-2.5.2-6.el4.ia64 +24
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) finch-2.5.2-6.el5, finch-2.5.2-6.el5.i386, finch-devel-2.5.2-6.el5 +15
- Red Hat Enterprise Linux WS version 4 finch-2.5.2-6.el4, finch-2.5.2-6.el4.i386, finch-2.5.2-6.el4.ia64 +24
Fixes 3 records
Priority LOW 33
The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0164 · Published 2008-08-08 · Fixed CWE-310
Priority LOW 33
The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service (memory or disk consumption) via a UDP packet that spe…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.02097 · Published 2008-07-01 · Fixed CWE-20
Priority LOW 30
Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain characters, as demonstrated using an MSN message that triggers the crash in the msn_slplink_process_msg…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.07258 · Published 2008-07-01 · Fixed CWE-20
THREATIST.IORead the docs