oss-sec mailing list archives

Re: CVE request: A Pidgin remote crash


From: Kurt Seifried <kseifried () redhat com>
Date: Mon, 07 May 2012 09:52:14 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/06/2012 11:40 PM, Mark Doliner wrote:
Could I request that a CVE be issued for a possible 
remotely-triggerable crash in Pidgin? To my knowledge no CVE
exists for this issue. The issue is described at 
http://pidgin.im/news/security/?id=63

The Pidgin project has just released version 2.10.4 which fixes
the
issue.

Thanks, Mark

Please use CVE-2012-2318 for this issue.

- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=zwKk
-----END PGP SIGNATURE-----


Current thread: