-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-1934 2010-02-19 23:54:06 --------------------------------------------------------------------------------
Name : pidgin Product : Fedora 13 Version : 2.6.6 Release : 1.fc13 URL : http://pidgin.im/ Summary : A Gtk+ based multiprotocol instant messaging client Description : Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just add an account using the account editor.
Pidgin supports many common features of other clients, as well as many unique features, such as perl scripting, TCL scripting and C plugins.
Pidgin is not affiliated with or endorsed by America Online, Inc., Microsoft Corporation, Yahoo! Inc., or ICQ Inc.
-------------------------------------------------------------------------------- Update Information:
2.6.6 with security and numerous minor bug fixes CVE-2010-0277 CVE-2010-0420 CVE-2010-0423 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #554335 - CVE-2010-0277 pidgin MSN protocol plugin memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=554335 [ 2 ] Bug #565786 - CVE-2010-0420 pidgin: Finch XMPP MUC Crash https://bugzilla.redhat.com/show_bug.cgi?id=565786 [ 3 ] Bug #565792 - CVE-2010-0423 pidgin: Smiley Denial of Service https://bugzilla.redhat.com/show_bug.cgi?id=565792 --------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use su -c 'yum update pidgin' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org