Oval Definition:oval:org.mitre.oval:def:13618
Revision Date:2014-06-23Version:20
Title:DSA-1805-1 pidgin -- several
Description:Several vulnerabilities have been discovered in Pidgin, a graphical multi-protocol instant messaging client. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-1373 A buffer overflow in the Jabber file transfer code may lead to denial of service or the execution of arbitrary code. CVE-2009-1375 Memory corruption in an internal library may lead to denial of service. CVE-2009-1376 The patch provided for the security issue tracked as CVE-2008-2927 - integer overflows in the MSN protocol handler - was found to be incomplete. The old stable distribution is affected under the source package name gaim. However, due to build problems the updated packages couldn't be released along with the stable version. It will be released once the build problem is resolved. For the stable distribution, these problems have been fixed in version 2.4.3-4lenny2. For the unstable distribution, these problems have been fixed in version 2.5.6-1. We recommend that you upgrade your pidgin packages.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2008-2927
CVE-2009-1373
CVE-2009-1375
CVE-2009-1376
DSA-1805-1
Platform(s):Debian GNU/Linux 5.0
Product(s):pidgin
Definition Synopsis
  • Debian GNU/Linux 5.0 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND Packages section
  • libpurple-dev DPKG is earlier than 2.4.3-4lenny2
  • OR finch-dev DPKG is earlier than 2.4.3-4lenny2
  • OR pidgin-dev DPKG is earlier than 2.4.3-4lenny2
  • OR libpurple-bin DPKG is earlier than 2.4.3-4lenny2
  • OR pidgin-data DPKG is earlier than 2.4.3-4lenny2
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is s390
  • OR Installed architecture is amd64
  • OR Installed architecture is sparc
  • OR Installed architecture is arm
  • OR Installed architecture is i386
  • OR Installed architecture is armel
  • OR Installed architecture is mips
  • OR Installed architecture is ia64
  • OR Installed architecture is alpha
  • OR Installed architecture is powerpc
  • OR Installed architecture is mipsel
  • OR Installed architecture is hppa
  • AND Packages section
  • finch DPKG is earlier than 2.4.3-4lenny2
  • OR pidgin-dbg DPKG is earlier than 2.4.3-4lenny2
  • OR pidgin DPKG is earlier than 2.4.3-4lenny2
  • OR libpurple0 DPKG is earlier than 2.4.3-4lenny2
  • BACK