Package libgadu updated to version 1.12.0-alt1 for branch sisyphus in task 126570.

Published: 2014-05-22

BDU:2015-04123

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: HIGH (7.5)

References:

Published: 2014-10-10
Modified: 2024-11-21

CVE-2013-4488

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

Severity: MEDIUM (4.3)

References:

Published: 2014-05-22
Modified: 2024-11-21

CVE-2014-3775

libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted message.

Severity: HIGH (7.5)

References:

Version: 2.1.0

Package libgadu update in sisyphus on 2014-07-31

ALT-PU-2014-1968-1

Closed vulnerabilities

BDU:2015-04123

CVE-2013-4488

CVE-2014-3775