finchpidgin security updatepidgin Sicherheitsupdate- specially crafted MSN SLP messages could cause an integer
overflow in pidgin. Attackers could potentially exploit
that to execute arbitrary code (CVE-2008-2927).
- overly long file names in MSN file transfers could crash
pidgin (CVE-2008-2955).
- SSL certifcates were not verfied. Therefore piding didn't
notice faked certificates (CVE-2008-3532)
Additionally a problem was fixed that prevented gaim
clients from connecting to the ICQ network after a server
change on July 1st 2008.
- speziell beschaffene MSN SLP-Nachrichten konnten einen
Integerüberlauf in gaim auslösen. Angreifer konnten dies
möglicherweise zum Ausführen von beliebigem Code
ausnutzen (CVE-2008-2927).
- zu lange Dateinamen in einem SLP-Dateitransfer konnten
pidgin zum Absturz bringen (CVE-2008-2955).
- SSL Zertifikate wurden nicht überprüft. Dadurch konnte
Pidgin gefälschte Zertifikate nicht bemerken
(CVE-2008-3532).
Ausserdem wurde ein Problem behoben, wodurch sich
pidgin-Clients Aufgrund einer Serverumstellung am 1. Juli
2008 nicht mehr am ICQ-Netzwerk anmelden konnten.
securityfinchi586aadaa10f58d54852e096cd3c50dc09bb63abba821464c7245d8ba556e0ef0783e6d46317803509a9finchppc066c9b85c293343152dd86ca1c5b75b9316e8daffinchx86_64f0687f6ad7a1be8879918cd418b0cca84333c027fc166f767d4144d1996e67e098a463ea62801294finch-develi586277f689077846664da065a6fd168043ed0525f6ba0d5a7624ec6e55fa14025200e2d5af4b9b6b680finch-develppc16f2e7ae2a708524c997b291b75e5df8292c4ed8finch-develx86_64fd85db904ff8a9fca0024d30b090344aea40d27e07e0fd62312e3c929a1e299b8ab6b04a95c9f75dlibpurplei586c588d4718b687cc10383a36d7ae22b184412642ed191823570757d5704fa3b4c7f2f8a93ea61eb07d13329dc023ee68f046271a80ffdc023a7221d4alibpurpleppcb26ff15084849931c1389c3550d27520ed73670eb8f4334781a80c048e6a6e965ab7f750c3d071401bbee0c77b75fa2c9f833d91cc3c034df33d94a2libpurplex86_648c4d9a0e1355e7c634fb94b663d8457e4d8a14cd4cef2b368026b7c1a809dc0d027b903c08a19d7817f1c9c65fdada3e7f30b91da4f28280c20c8248libpurple-develi5860215e2802703da12918bc551bbd17b79166737e49fb2b6c682f9a1bcfc1d9bdb78896e593ce267d219276ca53a1bfae485a74a600435a3796b4d86e8libpurple-develppc7d427795ad581e2a00f7fe3d4e38880ca33f179159550b2eb752e997008e471c9b292f94100f6fe20cc91415ae8bf9d6b1caecd4adb2a39caa4496ablibpurple-develx86_645c895ceb8c271dcba8bd4d1a04fac83f641ad3d2291ff5a88cef7992a7e88c09970f62e9a3e430b584ab84cae06cfb91bd4bf302473fee6efd14e559libpurple-meanwhilei58602af2dcc5ad8bb6febb8cbf95993cab926aaa3aaa880ec861ebfbf22dfd7d8f167028362c0400e70libpurple-meanwhileppc0eaea89e3b4d83a794e386152f90ed2f1ae55c67libpurple-meanwhilex86_640959147320a0be83d6ba7ee71768d773c9a5bf4a5a0857212074431331f3032f848198fffef1ac5alibpurple-monoi5861ff5b38860c9e1eebb3f8b587f04cd577bbc3a35bf10956b1c1944146c365de6b4ad36fadd8289b6libpurple-monoppc681ba7f1f5f925bbd22af7e788404f7d6922136alibpurple-monox86_64b11fd615e9f9cc4b3bf26eaa4f3ad7c6899e9d10442e86b6e46228d5fa52dcf918e5f1d19f17fb35pidgini5863ad6cd14f9544c36737a2de5efb1e93282f29fe8e2654bb216101e59ce12e5e233e7580b496a346epidginppcadffc0f11c96399453a7fe5351e0dd5b8b07e589839946603ec5299115b93357967f7edbbf728083pidginx86_645105bbdfa3360a0800af24977aba536ac1f4672da573d49b01d921e65027c2eab7e00e595be37693pidgin-develi586348685ab6a1e0e4cf2f9e444755b54ccb14068bee9e39db824ae3618ef10470b772a8d1dfaebcee2pidgin-develppc6be5ee10f0dd6fcb13dc03fb22464597e7ca9586pidgin-develx86_64b0399d07843eba9bb840bc8c2b907bacdda632e280303b333f26e0ef3dce970fe5dbeaa4621050c6