Red Hat Security AdvisoryRHSA-2013:0646
pidgin security update
Released 2013-03-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Optional Productivity Applications (v. 5 server) finch-2.6.6-17.el5_9.1, finch-2.6.6-17.el5_9.1.i386, finch-devel-2.6.6-17.el5_9.1 +15
- Red Hat Enterprise Linux Desktop (v. 6) libpurple-2.7.9-10.el6_4.1, pidgin-2.7.9-10.el6_4.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) finch-2.7.9-10.el6_4.1, finch-devel-2.7.9-10.el6_4.1, libpurple-devel-2.7.9-10.el6_4.1 +6
- Red Hat Enterprise Linux Server Optional (v. 6) finch-2.7.9-10.el6_4.1, finch-2.7.9-10.el6_4.1.ppc, finch-devel-2.7.9-10.el6_4.1 +12
- Red Hat Enterprise Linux Workstation (v. 6) libpurple-2.7.9-10.el6_4.1, pidgin-2.7.9-10.el6_4.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) finch-2.7.9-10.el6_4.1, finch-devel-2.7.9-10.el6_4.1, libpurple-devel-2.7.9-10.el6_4.1 +6
Fixes 3 records
Priority LOW 35
Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0286 · Published 2013-02-16 · Partial fix CWE-119
Priority LOW 28
sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service (application crash) via a crafted packet…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02601 · Published 2013-02-16 · Partial fix
Priority LOW 17
upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service (application crash) by leveraging access to the local net…
CVSS 2.0LOW 2.9· Adjacent network · No auth · Interaction — · EPSS 0.01366 · Published 2013-02-16 · Partial fix
THREATIST.IORead the docs