Lucene search

K
debianDebianDEBIAN:BSA-008-:0A530
HistoryOct 22, 2010 - 11:36 a.m.

Subject: BSA-008 Security Update for pidgin

2010-10-2211:36:43
lists.debian.org
6

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.008 Low

EPSS

Percentile

79.6%

Jan Wagner uploaded new packages for pidgin which fixed the
following security problems:

CVE-2010-3711
Fixes multiple remotely-triggered DoSes

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3711

For the lenny-backports distribution the problems have been fixed in
version 2.7.3-1~bpo50+2.

For the unstable (sid) distribution, the problem has been fixed in version
2.7.4-1, for testing (squeeze) the fix should hopefully follow soon.

Upgrade instructions

If you don't use pinning (see [1]) you have to update the package
manually via "apt-get -t lenny-backports install <packagelist>" with
the packagelist of your installed packages affected by this update.
[1] <http://backports.debian.org/Instructions&gt;

We recommend to pin the backports repository to 200 so that new
versions of installed backports will be installed automatically.

Package: *
Pin: release a=lenny-backports
Pin-Priority: 200

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.008 Low

EPSS

Percentile

79.6%