Pidgin: Multiple vulnerabilities Multiple vulnerabilities were found in Pidgin, the worst of which allowing for the remote execution of arbitrary code. Pidgin 2012-06-21 2012-06-21 299751 372785 385073 remote 2.10.0-r1 2.10.0-r1

Pidgin is an GTK Instant Messenger client.

Multiple vulnerabilities have been discovered in Pidgin. Please review the CVE identifiers referenced below for details.

These vulnerabilities allow for arbitrary file retrieval, Denial of Service and arbitrary code execution with the privileges of the user running Pidgin.

There is no known workaround at this time.

All Pidgin users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=net-im/pidgin-2.10.0-r1"
CVE-2010-0013 CVE-2011-2485 CVE-2011-3594 keytoaster craig