tocsin

Debian/pidgin: unknown

The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname.

Action: Upgrade pidgin to 2.10.6-3 or later.

Affected

introducedfixedlast affected
02.10.6-3-

Fixed versions

2.10.6-3

Sources

published · modified · JSON