Red Hat Security AdvisoryRHSA-2010:0115
pidgin security update
Released 2010-02-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 finch-2.6.6-1.el4, finch-2.6.6-1.el4.i386, finch-2.6.6-1.el4.ia64 +33
- Red Hat Enterprise Linux Desktop (v. 5 client) finch-2.6.6-1.el5, finch-2.6.6-1.el5.i386, libpurple-2.6.6-1.el5 +9
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) finch-devel-2.6.6-1.el5, finch-devel-2.6.6-1.el5.i386, libpurple-devel-2.6.6-1.el5 +4
- Red Hat Enterprise Linux Desktop version 4 finch-2.6.6-1.el4, finch-2.6.6-1.el4.i386, finch-devel-2.6.6-1.el4 +15
- Red Hat Enterprise Linux ES version 4 finch-2.6.6-1.el4, finch-2.6.6-1.el4.i386, finch-2.6.6-1.el4.ia64 +24
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) finch-2.6.6-1.el5, finch-2.6.6-1.el5.i386, finch-devel-2.6.6-1.el5 +15
- Red Hat Enterprise Linux WS version 4 finch-2.6.6-1.el4, finch-2.6.6-1.el4.i386, finch-2.6.6-1.el4.ia64 +24
Fixes 3 records
Priority LOW 27
gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02312 · Published 2010-02-24 · Fixed CWE-399
Priority LOW 27
slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspe…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02312 · Published 2010-01-09 · Fixed CWE-399
Priority LOW 25
libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does not properly parse nicknames containing <br> sequences, which allows remote attackers to cause a denial of service (applica…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02864 · Published 2010-02-24 · Fixed CWE-20
THREATIST.IORead the docs