Red Hat Security AdvisoryRHSA-2011:1371
pidgin security update
Released 2011-10-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) finch-devel-2.6.6-5.el5_7.1, finch-devel-2.6.6-5.el5_7.1.i386, libpurple-devel-2.6.6-5.el5_7.1 +4
- RHEL Optional Productivity Applications (v. 5 server) finch-2.6.6-5.el5_7.1, finch-2.6.6-5.el5_7.1.i386, finch-devel-2.6.6-5.el5_7.1 +15
- Red Hat Enterprise Linux AS version 4 finch-2.6.6-7.el4, finch-2.6.6-7.el4.i386, finch-2.6.6-7.el4.ia64 +33
- Red Hat Enterprise Linux Desktop (v. 5 client) finch-2.6.6-5.el5_7.1, finch-2.6.6-5.el5_7.1.i386, libpurple-2.6.6-5.el5_7.1 +9
- Red Hat Enterprise Linux Desktop version 4 finch-2.6.6-7.el4, finch-2.6.6-7.el4.i386, finch-devel-2.6.6-7.el4 +15
- Red Hat Enterprise Linux ES version 4 finch-2.6.6-7.el4, finch-2.6.6-7.el4.i386, finch-2.6.6-7.el4.ia64 +24
- Red Hat Enterprise Linux WS version 4 finch-2.6.6-7.el4, finch-2.6.6-7.el4.i386, finch-2.6.6-7.el4.ia64 +24
Fixes 2 records
Priority LOW 26
The g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service (crash) via invalid UTF-…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03194 · Published 2011-11-04 · Fixed CWE-119
Priority LOW 24
libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.02639 · Published 2011-03-14 · Fixed
