Red Hat Security AdvisoryRHSA-2011:1821
pidgin security update
Released 2011-12-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libpurple-2.7.9-3.el6.2, pidgin-2.7.9-3.el6.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) finch-2.7.9-3.el6.2, finch-devel-2.7.9-3.el6.2, libpurple-devel-2.7.9-3.el6.2 +6
- Red Hat Enterprise Linux Server Optional (v. 6) finch-2.7.9-3.el6.2, finch-2.7.9-3.el6.2.ppc, finch-devel-2.7.9-3.el6.2 +12
- Red Hat Enterprise Linux Workstation (v. 6) libpurple-2.7.9-3.el6.2, pidgin-2.7.9-3.el6.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) finch-2.7.9-3.el6.2, finch-devel-2.7.9-3.el6.2, libpurple-devel-2.7.9-3.el6.2 +6
Fixes 2 records
Priority LOW 30
family_feedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service (application c…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04528 · Published 2011-12-25 · Fixed CWE-20
Priority LOW 29
The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in (1) voice-chat and (2) video-chat stanzas, which allows remote attackers to cause a denial of service (application…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03583 · Published 2011-12-17 · Fixed CWE-20
