Lucene search

K
mageiaGentoo FoundationMGASA-2014-0295
HistoryJul 26, 2014 - 3:56 p.m.

Updated pidgin packages fix CVE-2014-3775

2014-07-2615:56:37
Gentoo Foundation
advisories.mageia.org
12

0.021 Low

EPSS

Percentile

89.2%

Updated pidgin packages fix security vulnerability: It was discovered that libgadu incorrectly handled certain messages from file relay servers. A malicious remote server or a man in the middle could use this issue to cause applications using libgadu to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2014-3775). The pidgin package was built with a bundled copy of the libgadu library which contained the vulnerable code. It has now been built against the external libgadu library, which had been fixed in a previous update. This update also fixes an issue with the Yahoo! protocol that was caused by a bad interaction with the GnuTLS library.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchpidgin< 2.10.9-1.1pidgin-2.10.9-1.1.mga3
Mageia4noarchpidgin< 2.10.9-1.1pidgin-2.10.9-1.1.mga4