Synopsis: Moderate: pidgin security update
Issue Date: 2013-03-14
CVE Numbers: CVE-2013-0272
CVE-2013-0273
CVE-2013-0274
—
A stack-based buffer overflow flaw was found in the Pidgin MXit protocol
plug-in. A malicious server or a remote attacker could use this flaw to
crash Pidgin by sending a specially-crafted HTTP request. (CVE-2013-0272)
A buffer overflow flaw was found in the Pidgin Sametime protocol plug-in.
A malicious server or a remote attacker could use this flaw to crash
Pidgin by sending a specially-crafted username. (CVE-2013-0273)
A buffer overflow flaw was found in the way Pidgin processed certain UPnP
responses. A remote attacker could send a specially-crafted UPnP response
that, when processed, would crash Pidgin. (CVE-2013-0274)
Pidgin must be restarted for this update to take effect.
—
SL5
x86_64
finch-2.6.6-17.el5_9.1.i386.rpm
finch-2.6.6-17.el5_9.1.x86_64.rpm
libpurple-2.6.6-17.el5_9.1.i386.rpm
libpurple-2.6.6-17.el5_9.1.x86_64.rpm
libpurple-perl-2.6.6-17.el5_9.1.x86_64.rpm
libpurple-tcl-2.6.6-17.el5_9.1.x86_64.rpm
pidgin-2.6.6-17.el5_9.1.i386.rpm
pidgin-2.6.6-17.el5_9.1.x86_64.rpm
pidgin-debuginfo-2.6.6-17.el5_9.1.i386.rpm
pidgin-debuginfo-2.6.6-17.el5_9.1.x86_64.rpm
pidgin-perl-2.6.6-17.el5_9.1.x86_64.rpm
finch-devel-2.6.6-17.el5_9.1.i386.rpm
finch-devel-2.6.6-17.el5_9.1.x86_64.rpm
libpurple-devel-2.6.6-17.el5_9.1.i386.rpm
libpurple-devel-2.6.6-17.el5_9.1.x86_64.rpm
pidgin-devel-2.6.6-17.el5_9.1.i386.rpm
pidgin-devel-2.6.6-17.el5_9.1.x86_64.rpm
i386
finch-2.6.6-17.el5_9.1.i386.rpm
libpurple-2.6.6-17.el5_9.1.i386.rpm
libpurple-perl-2.6.6-17.el5_9.1.i386.rpm
libpurple-tcl-2.6.6-17.el5_9.1.i386.rpm
pidgin-2.6.6-17.el5_9.1.i386.rpm
pidgin-debuginfo-2.6.6-17.el5_9.1.i386.rpm
pidgin-perl-2.6.6-17.el5_9.1.i386.rpm
finch-devel-2.6.6-17.el5_9.1.i386.rpm
libpurple-devel-2.6.6-17.el5_9.1.i386.rpm
pidgin-devel-2.6.6-17.el5_9.1.i386.rpm
SL6
x86_64
libpurple-2.7.9-10.el6_4.1.i686.rpm
libpurple-2.7.9-10.el6_4.1.x86_64.rpm
pidgin-2.7.9-10.el6_4.1.x86_64.rpm
pidgin-debuginfo-2.7.9-10.el6_4.1.i686.rpm
pidgin-debuginfo-2.7.9-10.el6_4.1.x86_64.rpm
finch-2.7.9-10.el6_4.1.i686.rpm
finch-2.7.9-10.el6_4.1.x86_64.rpm
finch-devel-2.7.9-10.el6_4.1.i686.rpm
finch-devel-2.7.9-10.el6_4.1.x86_64.rpm
libpurple-devel-2.7.9-10.el6_4.1.i686.rpm
libpurple-devel-2.7.9-10.el6_4.1.x86_64.rpm
libpurple-perl-2.7.9-10.el6_4.1.x86_64.rpm
libpurple-tcl-2.7.9-10.el6_4.1.x86_64.rpm
pidgin-devel-2.7.9-10.el6_4.1.i686.rpm
pidgin-devel-2.7.9-10.el6_4.1.x86_64.rpm
pidgin-docs-2.7.9-10.el6_4.1.x86_64.rpm
pidgin-perl-2.7.9-10.el6_4.1.x86_64.rpm
i386
libpurple-2.7.9-10.el6_4.1.i686.rpm
pidgin-2.7.9-10.el6_4.1.i686.rpm
pidgin-debuginfo-2.7.9-10.el6_4.1.i686.rpm
finch-2.7.9-10.el6_4.1.i686.rpm
finch-devel-2.7.9-10.el6_4.1.i686.rpm
libpurple-devel-2.7.9-10.el6_4.1.i686.rpm
libpurple-perl-2.7.9-10.el6_4.1.i686.rpm
libpurple-tcl-2.7.9-10.el6_4.1.i686.rpm
pidgin-devel-2.7.9-10.el6_4.1.i686.rpm
pidgin-docs-2.7.9-10.el6_4.1.i686.rpm
pidgin-perl-2.7.9-10.el6_4.1.i686.rpm
– Scientific Linux Development Team
