Red Hat Security AdvisoryRHSA-2010:0788
pidgin security update
Released 2010-10-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 finch-2.6.6-5.el4_8, finch-2.6.6-5.el4_8.i386, finch-2.6.6-5.el4_8.ia64 +33
- Red Hat Enterprise Linux Desktop (v. 5 client) finch-2.6.6-5.el5_5, finch-2.6.6-5.el5_5.i386, libpurple-2.6.6-5.el5_5 +9
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) finch-devel-2.6.6-5.el5_5, finch-devel-2.6.6-5.el5_5.i386, libpurple-devel-2.6.6-5.el5_5 +4
- Red Hat Enterprise Linux Desktop version 4 finch-2.6.6-5.el4_8, finch-2.6.6-5.el4_8.i386, finch-devel-2.6.6-5.el4_8 +15
- Red Hat Enterprise Linux ES version 4 finch-2.6.6-5.el4_8, finch-2.6.6-5.el4_8.i386, finch-2.6.6-5.el4_8.ia64 +24
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) finch-2.6.6-5.el5_5, finch-2.6.6-5.el5_5.i386, finch-devel-2.6.6-5.el5_5 +15
- Red Hat Enterprise Linux WS version 4 finch-2.6.6-5.el4_8, finch-2.6.6-5.el4_8.i386, finch-2.6.6-5.el4_8.ia64 +24
Fixes 2 records
Priority LOW 31
The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05586 · Published 2010-05-14 · Partial fix CWE-20
Priority LOW 25
libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and applic…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.0327 · Published 2010-10-27 · Fixed CWE-20
