finch openSUSE 11.0 - specially crafted MSN SLP messages could cause an integer overflow in pidgin. Attackers could potentially exploit that to execute arbitrary code (CVE-2008-2927). - overly long file names in MSN file transfers could crash pidgin (CVE-2008-2955). - SSL certifcates were not verfied. Therefore piding didn't notice faked certificates (CVE-2008-3532) Additionally a problem was fixed that prevented gaim clients from connecting to the ICQ network after a server change on July 1st 2008. finch-2.4.1-28.4.i586.rpm finch-2.4.1-28.4.ppc.rpm finch-2.4.1-28.4.x86_64.rpm finch-devel-2.4.1-28.4.i586.rpm finch-devel-2.4.1-28.4.ppc.rpm finch-devel-2.4.1-28.4.x86_64.rpm libpurple-2.4.1-28.4.i586.rpm libpurple-2.4.1-28.4.ppc.rpm libpurple-2.4.1-28.4.x86_64.rpm libpurple-devel-2.4.1-28.4.i586.rpm libpurple-devel-2.4.1-28.4.ppc.rpm libpurple-devel-2.4.1-28.4.x86_64.rpm libpurple-meanwhile-2.4.1-28.4.i586.rpm libpurple-meanwhile-2.4.1-28.4.ppc.rpm libpurple-meanwhile-2.4.1-28.4.x86_64.rpm libpurple-mono-2.4.1-28.4.i586.rpm libpurple-mono-2.4.1-28.4.ppc.rpm libpurple-mono-2.4.1-28.4.x86_64.rpm pidgin-2.4.1-28.4.i586.rpm pidgin-2.4.1-28.4.ppc.rpm pidgin-2.4.1-28.4.x86_64.rpm pidgin-devel-2.4.1-28.4.i586.rpm pidgin-devel-2.4.1-28.4.ppc.rpm pidgin-devel-2.4.1-28.4.x86_64.rpm