Discover Government News

=========================================================================Ubuntu Security Notice USN-3031-1
July 12, 2016

pidgin vulnerabilities
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 15.10
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS

Summary:

Pidgin could be made to crash or run programs if it received
specially crafted network traffic.

Software Description:
- pidgin: graphical multi-protocol instant messaging client for X

Details:

Yves Younan discovered that Pidgin contained multiple issues in the MXit
protocol support. A remote attacker could use this issue to cause Pidgin to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  libpurple0                      1:2.10.11-0ubuntu4.2

Ubuntu 14.04 LTS:
  libpurple0                      1:2.10.9-0ubuntu3.3

Ubuntu 12.04 LTS:
  libpurple0                      1:2.10.3-0ubuntu1.7

After a standard system update you need to restart Pidgin to make all the
necessary changes.

References:
  https://ubuntu.com/security/notices/USN-3031-1
  CVE-2016-2365, CVE-2016-2366, CVE-2016-2367, CVE-2016-2368,
  CVE-2016-2369, CVE-2016-2370, CVE-2016-2371, CVE-2016-2372,
  CVE-2016-2373, CVE-2016-2374, CVE-2016-2375, CVE-2016-2376,
  CVE-2016-2377, CVE-2016-2378, CVE-2016-2380, CVE-2016-4323

Package Information:
  https://launchpad.net/ubuntu/+source/pidgin/1:2.10.11-0ubuntu4.2
  https://launchpad.net/ubuntu/+source/pidgin/1:2.10.9-0ubuntu3.3
  https://launchpad.net/ubuntu/+source/pidgin/1:2.10.3-0ubuntu1.7


Ubuntu 3031-1: Pidgin vulnerabilities

July 12, 2016
Pidgin could be made to crash or run programs if it received specially crafted network traffic.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 15.10: libpurple0 1:2.10.11-0ubuntu4.2 Ubuntu 14.04 LTS: libpurple0 1:2.10.9-0ubuntu3.3 Ubuntu 12.04 LTS: libpurple0 1:2.10.3-0ubuntu1.7 After a standard system update you need to restart Pidgin to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3031-1

CVE-2016-2365, CVE-2016-2366, CVE-2016-2367, CVE-2016-2368,

CVE-2016-2369, CVE-2016-2370, CVE-2016-2371, CVE-2016-2372,

CVE-2016-2373, CVE-2016-2374, CVE-2016-2375, CVE-2016-2376,

CVE-2016-2377, CVE-2016-2378, CVE-2016-2380, CVE-2016-4323

Severity
July 12, 2016

Package Information

https://launchpad.net/ubuntu/+source/pidgin/1:2.10.11-0ubuntu4.2 https://launchpad.net/ubuntu/+source/pidgin/1:2.10.9-0ubuntu3.3 https://launchpad.net/ubuntu/+source/pidgin/1:2.10.3-0ubuntu1.7

Related News