pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-3615 Here are the details from the Slackware 13.0...

openSUSE 10 Security Update : finch (finch-6351)

Several bugfixes were done for the Instant Messenger Pidgin : - Malformed responses to file transfers could cause a buffer overflow in pidgin CVE-2009-1373 and specially crafted packets could crash it CVE-2009-1375. - The fix against integer overflows in the msn protocol handling was incomplete...

CentOS Security Advisory CESA-2009:1453 (pidgin)

The remote host is missing updates to pidgin announced in advisory CESA-2009:1453. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

CentOS Security Advisory CESA-2009:1453 (pidgin)

The remote host is missing updates to pidgin announced in advisory CESA-2009:1453. CESA-2009:1453 64987 4 $Id: ovcesa20091453.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1453 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RedHat Security Advisory RHSA-2009:1453

The remote host is missing updates announced in advisory RHSA-2009:1453. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Info/Query IQ is an Extensible Messaging and Presence Protocol XMPP specific request-respons...

RedHat Security Advisory RHSA-2009:1453

The remote host is missing updates announced in advisory RHSA-2009:1453. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Info/Query IQ is an Extensible Messaging and Presence Protocol XMPP specific request-respons...

SuSE 11 Security Update : pidgin (SAT Patch Number 1245)

This update of pidgin fixes a remote arbitrary code execution vulnerability in MSN SLP packet processing code. CORE-2009-0727 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself...

SuSE 11 Security Update : Pidgin (SAT Patch Number 1207)

This update of pidgin fixes a remote arbitrary code execution vulnerability in MSN SLP packet processing code. CORE-2009-0727 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself...

SuSE 11 Security Update : pidgin (SAT Patch Number 1094)

Several bugfixes were done for the Instant Messenger Pidgin : - Malformed responses to file transfers could cause a buffer overflow in pidgin CVE-2009-1373 and specially crafted packets could crash it. CVE-2009-1375 - The fix against integer overflows in the msn protocol handling was incomplete...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2009:1453 Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging...

RHEL 4 / 5 : pidgin (RHSA-2009:1453)

Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...

Pidgin: NULL pointer dereference by processing incomplete MSN SLP invite (DoS)

The msnslpsiprecv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an SLP invite message that lacks certain required fields, as...

Pidgin: NULL pointer dereference by handling IRC topic(s) (DoS)

libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service NULL pointer dereference and application crash via a TOPIC message that lacks a topic string...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...

pidgin: ignores SSL/TLS requirements with old jabber servers

protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...

Pidgin: NULL pointer dereference by processing a custom smiley (DoS)

The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service application crash via XHTML-IM content with cid: images...

pidgin security update

2.6.2-2 - Upstream backports: 97e003ed2bc2bafbb993693c9ae9c6d667731cc1 aim-buddy-status-grab 37aa00d044431100d37466517568640cb082680c yahoo-buddy-idle-time 40005b889ee276fbcd0a4e886a68d8a8cce45698 yahoo-status-change-away cb46b045aa6e927a3814d9053c2b1c0f08d6fa62 crash-validate-jid 2.6.2-1.1 - VV...

Pidgin Multiple Denial Of Service Vulnerabilities (Windows)

This host has Pidgin installed and is prone to multiple Denial of Service vulnerabilities. Vulnerabilities Insight: - An error in libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple can trigger a NULL-pointer dereference when processing TOPIC messages which lack a topic string....

Mandrake Security Advisory MDVSA-2009:230 (pidgin)

The remote host is missing an update to pidgin announced via advisory MDVSA-2009:230. OpenVAS Vulnerability Test $Id: mdksa2009230.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:230 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Mandrake Security Advisory MDVSA-2009:230 (pidgin)

The remote host is missing an update to pidgin announced via advisory MDVSA-2009:230. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...