File _patchinfo of Package patchinfo.220

<patchinfo incident="220">
  <issue id="902409" tracker="bnc">VUL-0: CVE-2014-3695: pidgin: crash in MXit protocol plug-in</issue>
  <issue id="902408" tracker="bnc">VUL-0: CVE-2014-3698 pidgin: remote information leak via crafted XMPP message</issue>
  <issue id="902410" tracker="bnc">VUL-0: CVE-2014-3696: pidgin: denial of service parsing Groupwise server message</issue>
  <issue id="CVE-2014-3698" tracker="cve" />
  <issue id="CVE-2014-3695" tracker="cve" />
  <issue id="CVE-2014-3696" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>dimstar</packager>
  <description>This pidgin security update fixes the following issues:

- bnc#902408: remote information leak via crafted XMPP message. 
  (CVE-2014-3698)
- bnc#902410: denial of service parsing Groupwise server message. 
  (CVE-2014-3696)
- bnc#902409: crash in MXit protocol plug-in. (CVE-2014-3695)
</description>
  <summary>Security update for pidgin</summary>
</patchinfo>
openSUSE Build Service is sponsored by