Subject: BSA-008 Security Update for pidgin

Jan Wagner uploaded new packages for pidgin which fixed the following security problems: CVE-2010-3711 Fixes multiple remotely-triggered DoSes https://vulners.com/cve/CVE-2010-3711 For the lenny-backports distribution the problems have been fixed in version 2.7.3-1bpo50+2. For the unstable sid...

RHEL 4 / 5 : pidgin (RHSA-2010:0788)

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:208)

A security vulnerability has been identified and fixed in pidgin : It has been discovered that eight denial of service conditions exist in libpurple all due to insufficient validation of the return value from purplebase64decode. Invalid or malformed data received in place of a valid base64-encode...

RedHat Update for pidgin RHSA-2010:0788-01

Check for the Version of pidgin OpenVAS Vulnerability Test RedHat Update for pidgin RHSA-2010:0788-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for pidgin MDVSA-2010:208 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVSA-2010:208 pidgin Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for pidgin RHSA-2010:0788-01

Check for the Version of pidgin OpenVAS Vulnerability Test RedHat Update for pidgin RHSA-2010:0788-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2010:0788 Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVS...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Pidgin: MSN SLP emoticon DoS (NULL pointer dereference)

The msnemoticonmsg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a custom emoticon in a malformed SLP message...

Security fix for the ALT Linux 5 package pidgin-mini version 2.7.4-alt1

Oct. 21, 2010 Slava Semushin 2.7.4-alt1 - Updated to 2.7.4 + CVE-2010-3711: eight DoS conditions in libpurple...

pidgin security update

2.6.6-5 - Add patch for CVE-2010-1624 RH bug 644153. 2.6.6-4 - Initial patch for CVE-2010-3711 was incomplete. Here's the rest. 2.6.6-3 - Add patch for CVE-2010-3711 RH bug 644153...

CVE-2010-3088

The notify function in pidgin-knotify.c in the pidgin-knotify plugin 0.2.1 and earlier for Pidgin allows remote attackers to execute arbitrary commands via shell metacharacters in a message...

Code injection

The notify function in pidgin-knotify.c in the pidgin-knotify plugin 0.2.1 and earlier for Pidgin allows remote attackers to execute arbitrary commands via shell metacharacters in a message...

CVE-2010-3088

The notify function in pidgin-knotify.c in the pidgin-knotify plugin 0.2.1 and earlier for Pidgin allows remote attackers to execute arbitrary commands via shell metacharacters in a message...

CVE-2010-3088

Summary: CVE-2010-3088 affects the pidgin-knotify plugin for Pidgin, versions 0.2.1 and earlier. The root cause is improper sanitization of shell metacharacters in received messages within the notify function (pidgin-knotify.c). Impact: remote attackers could cause arbitrary code execution with t...

Pidgin 2.7.3 Denial of Service

No description provided by source. Name : Pidgin Denial of Service Vulnerability Date : August, 23 2010 Vendor Url : http://www.pidgin.im/ Author : Sid3^effects aKa HaRi shellc99atyahoo.com Big hugs : Th3 RDX,Hananbutt : special thanks to : r0073r inj3ct0r.com,L0rd...

Slackware 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / current : pidgin (SSA:2010-240-05)

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-240-05. The text itse...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/pidgin-2.7.3-i486-1slack13.1.txz: Upgraded. This fixes a crash due to malformed X-Status messages. For more...

Pidgin 2.7.3 Denial of Service

Exploit for windows platform in category dos / poc ============================== Pidgin 2.7.3 Denial of Service ============================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

[ MDVSA-2010:148 ] pidgin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:148 http://www.mandriva.com/security/ Package : pidgin Date : August 12, 2010 Affected: 2008.0, 2009.0, 2010.0, 2010.1 Problem Description: A security vulnerability has been identified and fixed in pidgin: T...