Lucene search

K
suseSuseSUSE-SU-2012:0782-1
HistoryJun 22, 2012 - 7:08 p.m.

Security update for finch, libpurple and pidgin (important)

2012-06-2219:08:37
lists.opensuse.org
14

0.012 Low

EPSS

Percentile

83.9%

Various remote triggerable crashes in pidgin have been
fixed:

  • CVE-2012-1178: In some situations the MSN server
    sends text that isnโ€™t UTF-8 encoded, and Pidgin fails to
    verify the textโ€™s encoding. In some cases this can lead to
    a crash when attempting to display the text ().
  • CVE-2012-1178/CVE-2012-2318: Incoming messages with
    certain characters or character encodings can cause clients
    to crash.
  • CVE-2012-2214: A series of specially crafted file
    transfer requests can cause clients to reference invalid
    memory. The user must have accepted one of the file
    transfer requests.