Ubuntu
pidgin package

pidgin 1:2.10.9-0ubuntu7.1 source package in Ubuntu

Changelog

pidgin (1:2.10.9-0ubuntu7.1) utopic-security; urgency=medium

  * SECURITY UPDATE: insufficient ssl certificate validation
    - debian/patches/CVE-2014-3694.patch: fix basic constraints checking in
      libpurple/certificate.c, libpurple/certificate.h,
      libpurple/plugins/ssl/ssl-gnutls.c, libpurple/plugins/ssl/ssl-nss.c.
    - CVE-2014-3694
  * SECURITY UPDATE: denial of service via malformed MXit emoticon response
    - debian/patches/CVE-2014-3695.patch: properly check lengths in
      libpurple/protocols/mxit/markup.c.
    - CVE-2014-3695
  * SECURITY UPDATE: denial of service via malformed Groupwise message
    - debian/patches/CVE-2014-3696.patch: check sizes in
      libpurple/protocols/novell/nmevent.c.
    - CVE-2014-3696
  * SECURITY UPDATE: XMPP information leak
    - debian/patches/CVE-2014-3698.patch: fix leaks in
      libpurple/protocols/jabber/jutil.c.
    - CVE-2014-3698
 -- Marc Deslauriers <email address hidden>   Mon, 27 Oct 2014 11:29:40 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Utopic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
pidgin_2.10.9.orig.tar.bz2 9.6 MiB dc362ed8577f623eea4554a79e917073aa726825074fea402f2e515f0f51f319
pidgin_2.10.9-0ubuntu7.1.debian.tar.xz 63.3 KiB 728aeea515f740f7b53f06c8b9ffb2dc8d0044f9928c56a191c5927bdfe6a7a5
pidgin_2.10.9-0ubuntu7.1.dsc 2.9 KiB f119ad4da8f04fa5f49f4730c2d64e58839da9ea4b9d64853aa7684ded3f0a77

View changes file

Binary packages built by this source

finch: No summary available for finch in ubuntu utopic.

No description available for finch in ubuntu utopic.

finch-dev: No summary available for finch-dev in ubuntu utopic.

No description available for finch-dev in ubuntu utopic.

libpurple-bin: No summary available for libpurple-bin in ubuntu utopic.

No description available for libpurple-bin in ubuntu utopic.

libpurple-dev: No summary available for libpurple-dev in ubuntu utopic.

No description available for libpurple-dev in ubuntu utopic.

libpurple0: No summary available for libpurple0 in ubuntu utopic.

No description available for libpurple0 in ubuntu utopic.

pidgin: No summary available for pidgin in ubuntu utopic.

No description available for pidgin in ubuntu utopic.

pidgin-data: No summary available for pidgin-data in ubuntu utopic.

No description available for pidgin-data in ubuntu utopic.

pidgin-dbg: No summary available for pidgin-dbg in ubuntu utopic.

No description available for pidgin-dbg in ubuntu utopic.

pidgin-dev: No summary available for pidgin-dev in ubuntu utopic.

No description available for pidgin-dev in ubuntu utopic.