Red Hat Security Advisory: pidgin security, bug fix, and enhancement update

Fixed packages 30

Vulnerabilities 5

• High 7.5
  CVE-2017-2640

  An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server …

  Pidgin Pidgin pidgin pidgin Debian Ubuntu Alpine
  Jul 27, 2018
• Unscored —
  CVE-2014-3694

  The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 …

  pidgin pidgin Debian Ubuntu
  Oct 29, 2014
• Unscored —
  CVE-2014-3695

  markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of s…

  pidgin pidgin Debian Ubuntu
  Oct 29, 2014
• Unscored —
  CVE-2014-3696

  nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause …

  pidgin pidgin Debian Ubuntu
  Oct 29, 2014
• Unscored —
  CVE-2014-3698

  The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows …

  pidgin pidgin Debian Ubuntu
  Oct 29, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1154908
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1154909
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1154910
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1154911
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1369526
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1430019
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1439296
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1445921
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1446368
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1854.json
• report
  https://access.redhat.com/security/cve/CVE-2014-3694
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3694
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3694
• report
  https://access.redhat.com/security/cve/CVE-2014-3695
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3695
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3695
• report
  https://access.redhat.com/security/cve/CVE-2014-3696
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3696
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3696
• report
  https://access.redhat.com/security/cve/CVE-2014-3698
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3698
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3698
• report
  https://access.redhat.com/security/cve/CVE-2017-2640
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-2640
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-2640