Ubuntu

“pidgin” 1:2.10.3-0ubuntu1.3 source package in The Precise Pangolin

Publishing history

1:2.10.3-0ubuntu1.3
SUPERSEDED: Precise pocket Updates in component main and section net
  • Removed from disk on 2014-02-07.
  • Removal requested on 2014-02-07.
  • Superseded on 2014-02-06 by pidgin - 1:2.10.3-0ubuntu1.4
  • Published on 2013-02-25
  • Copied from ubuntu precise in Private PPA for Ubuntu Security Team by Ubuntu Archive Robot
1:2.10.3-0ubuntu1.3
SUPERSEDED: Precise pocket Security in component main and section net
  • Removed from disk on 2014-02-07.
  • Removal requested on 2014-02-07.
  • Superseded on 2014-02-06 by pidgin - 1:2.10.3-0ubuntu1.4
  • Published on 2013-02-25
  • Copied from ubuntu precise in Private PPA for Ubuntu Security Team by Marc Deslauriers

Builds

Changelog

pidgin (1:2.10.3-0ubuntu1.3) precise-security; urgency=low

  * SECURITY UPDATE: file overwrite via MXit crafted pathname
    - debian/patches/CVE-2013-0271.patch: properly escape filenames in
      libpurple/protocols/mxit/formcmds.c,
      libpurple/protocols/mxit/splashscreen.c.
    - CVE-2013-0271
  * SECURITY UPDATE: arbitrary code execution via long HTTP header in MXit
    - debian/patches/CVE-2013-0272.patch: properly check lengths in
      libpurple/protocols/mxit/http.c.
    - CVE-2013-0272
  * SECURITY UPDATE: denial of service via long user ID in Sametime
    - debian/patches/CVE-2013-0273.patch: use g_strlcpy in
      libpurple/protocols/sametime/sametime.c.
    - CVE-2013-0273
  * SECURITY UPDATE: denial of service via long UPnP responses
    - debian/patches/CVE-2013-0274.patch: use g_strlcpy in libpurple/upnp.c.
    - CVE-2013-0274
 -- Marc Deslauriers <email address hidden>   Thu, 21 Feb 2013 12:53:30 -0500