Red Hat Security AdvisoryRHSA-2010:0890
pidgin security update
Released 2010-11-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libpurple-2.6.6-6.el6_0, pidgin-2.6.6-6.el6_0
- Red Hat Enterprise Linux Desktop Optional (v. 6) finch-2.6.6-6.el6_0, finch-devel-2.6.6-6.el6_0, libpurple-devel-2.6.6-6.el6_0 +6
- Red Hat Enterprise Linux Server Optional (v. 6) finch-2.6.6-6.el6_0, finch-2.6.6-6.el6_0.ppc, finch-devel-2.6.6-6.el6_0 +12
- Red Hat Enterprise Linux Workstation (v. 6) libpurple-2.6.6-6.el6_0, pidgin-2.6.6-6.el6_0
- Red Hat Enterprise Linux Workstation Optional (v. 6) finch-2.6.6-6.el6_0, finch-devel-2.6.6-6.el6_0, libpurple-devel-2.6.6-6.el6_0 +6
Fixes 1 record
Priority LOW 25
libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and applic…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.0327 · Published 2010-10-27 · Fixed CWE-20
