Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 457907 - (CVE-2008-3532) CVE-2008-3532 pidgin: NSS plugin doesn't verify SSL certificates
CVE-2008-3532 pidgin: NSS plugin doesn't verify SSL certificates
Status: CLOSED ERRATA
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
source=debian,reported=20080728,publi...
: Security
Depends On: 472585 472586 472587 472588 833957
Blocks:
  Show dependency tree / graph
 
Reported: 2008-08-05 07:01 EDT by Tomas Hoger
Modified: 2014-08-20 16:46 EDT (History)
7 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2009-11-19 10:31:09 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2008:1023 normal SHIPPED_LIVE Moderate: pidgin security and bug fix update 2008-12-15 08:14:14 EST

  None (edit)
Description Tomas Hoger 2008-08-05 07:01:40 EDT 
According to upstream bug report and Debian bug report:

  http://developer.pidgin.im/ticket/6500
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492434

Pidgin builds using NSS library to provide cryptography do not properly verify SSL certificates provided by SSL-secured remote server (such as Jabber server).  Pidgin accept invalid or self-signed certificates, regardless of the list of configured trusted SSL CA certificates.
Comment 1 Tomas Hoger 2008-08-27 15:59:21 EDT 
Upstream advisory:
  http://www.pidgin.im/news/security/?id=28

Fixed upstream in: 2.5.0
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.