Test ID:	1.3.6.1.4.1.25623.1.0.123472
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2014-0139)
Summary:	The remote host is missing an update for the 'pidgin' package(s) announced via the ELSA-2014-0139 advisory.
Description:	Summary: The remote host is missing an update for the 'pidgin' package(s) announced via the ELSA-2014-0139 advisory. Vulnerability Insight: [2.7.9-27.el6] - Fix regression in CVE-2013-6483. [2.7.9-26.el6] - Fix patch for CVE-2012-6152 (RH bug #1058242). [2.7.9-25.el6] - Add patch for CVE-2014-0020 (RH bug #1058242). [2.7.9-24.el6] - Add patch for CVE-2013-6490 (RH bug #1058242). [2.7.9-23.el6] - Add patch for CVE-2013-6489 (RH bug #1058242). [2.7.9-22.el6] - Add patch for CVE-2013-6487 (RH bug #1058242). [2.7.9-21.el6] - Add patch for CVE-2013-6477 (RH bug #1058242). [2.7.9-20.el6] - Add patch for CVE-2013-6485 (RH bug #1058242). [2.7.9-19.el6] - Add patch for CVE-2013-6484 (RH bug #1058242). [2.7.9-18.el6] - Add patch for CVE-2013-6483 (RH bug #1058242). [2.7.9-17.el6] - Add patch for CVE-2013-6482 (RH bug #1058242). [2.7.9-16.el6] - Add patch for CVE-2013-6481 (RH bug #1058242). [2.7.9-15.el6] - Add patch for CVE-2013-6479 (RH bug #1058242). [2.7.9-14.el6] - Turns out the previous patch is actually for CVE-2013-6478. [2.7.9-13.el6] - Add patch for CVE-2013-6477 (RH bug #1058242). [2.7.9-12.el6] - Add patch for CVE-2012-6152 (RH bug #1058242). Affected Software/OS: 'pidgin' package(s) on Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-6152 RedHat Security Advisories: RHSA-2014:0139 https://rhn.redhat.com/errata/RHSA-2014-0139.html SuSE Security Announcement: openSUSE-SU-2014:0239 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html SuSE Security Announcement: openSUSE-SU-2014:0326 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html http://www.ubuntu.com/usn/USN-2100-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-6477 Debian Security Information: DSA-2859 (Google Search) http://www.debian.org/security/2014/dsa-2859 Common Vulnerability Exposure (CVE) ID: CVE-2013-6478 http://pidgin.im/pipermail/support/2013-March/012980.html http://pidgin.im/pipermail/support/2013-March/012981.html Common Vulnerability Exposure (CVE) ID: CVE-2013-6479 Common Vulnerability Exposure (CVE) ID: CVE-2013-6481 Common Vulnerability Exposure (CVE) ID: CVE-2013-6482 Common Vulnerability Exposure (CVE) ID: CVE-2013-6483 Common Vulnerability Exposure (CVE) ID: CVE-2013-6484 Common Vulnerability Exposure (CVE) ID: CVE-2013-6485 BugTraq ID: 65243 http://www.securityfocus.com/bid/65243 Common Vulnerability Exposure (CVE) ID: CVE-2013-6487 BugTraq ID: 65188 http://www.securityfocus.com/bid/65188 Debian Security Information: DSA-2852 (Google Search) http://www.debian.org/security/2014/dsa-2852 http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128277.html https://security.gentoo.org/glsa/201508-02 http://www.mandriva.com/security/advisories?name=MDVSA-2014:039 http://libgadu.net/releases/1.11.3.html http://vrt-blog.snort.org/2014/01/vrt-2013-1001-cve-2013-6487-buffer.html http://www.ubuntu.com/usn/USN-2101-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-6489 BugTraq ID: 65192 http://www.securityfocus.com/bid/65192 http://hg.pidgin.im/pidgin/main/rev/4c897372b5a4 Common Vulnerability Exposure (CVE) ID: CVE-2013-6490 BugTraq ID: 65195 http://www.securityfocus.com/bid/65195 Common Vulnerability Exposure (CVE) ID: CVE-2014-0020
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.