Thank you for using Ubuntu and filing a bug. These upstream releases correspond to the following CVEs: CVE-2011-3594 CVE-2011-4601 CVE-2011-4602 CVE-2011-4603 CVE-2011-4939 CVE-2012-1178. All are fixed in our development release. CVE-2011-3594 is fixed in all releases. The others have been assessed with a 'Low' priority and will be fixed in a future pidgin update.
** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2011-3594 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2011-4601 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2011-4602 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2011-4603 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2011-4939 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-1178 ** Also affects: pidgin (Ubuntu Lucid) Importance: Undecided Status: New ** Also affects: pidgin (Ubuntu Maverick) Importance: Undecided Status: New ** Also affects: pidgin (Ubuntu Oneiric) Importance: Undecided Status: New ** Also affects: pidgin (Ubuntu Natty) Importance: Undecided Status: New ** Also affects: pidgin (Ubuntu Precise) Importance: Undecided Status: New ** Changed in: pidgin (Ubuntu Precise) Status: New => Triaged ** Changed in: pidgin (Ubuntu Lucid) Status: New => Triaged ** Changed in: pidgin (Ubuntu Lucid) Importance: Undecided => Low ** Changed in: pidgin (Ubuntu Maverick) Status: New => Triaged ** Changed in: pidgin (Ubuntu Maverick) Importance: Undecided => Low ** Changed in: pidgin (Ubuntu Natty) Status: New => Triaged ** Changed in: pidgin (Ubuntu Natty) Importance: Undecided => Low ** Changed in: pidgin (Ubuntu Oneiric) Status: New => Triaged ** Changed in: pidgin (Ubuntu Oneiric) Importance: Undecided => Low ** Changed in: pidgin (Ubuntu Precise) Importance: Undecided => Low ** Changed in: pidgin (Ubuntu Precise) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/958208 Title: Backport security fixes from Pidgin 2.10.1 and 2.10.2 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pidgin/+bug/958208/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs