Package: pidgin Version: 2.10.6-1 Severity: important Tags: security upstream
The full bug description in the upstream's Trac: http://developer.pidgin.im/ticket/15308 According to the bug report, ssl_auth_cert in ssl-nss plugin always returns true. The bug reporter suggests to switch to GnuTLS plugin until NSS is fixed. -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 3.5-trunk-686-pae (SMP w/2 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages pidgin depends on: ii gconf2 3.2.5-1 ii libatk1.0-0 2.2.0-2 ii libc6 2.13-26 ii libcairo2 1.10.2-2 ii libdbus-1-3 1.4.16-1 ii libdbus-glib-1-2 0.98-1 ii libfontconfig1 2.9.0-3 ii libfreetype6 2.4.2-2.1 ii libgdk-pixbuf2.0-0 2.26.0-1 ii libglib2.0-0 2.32.0-1 ii libgstreamer0.10-0 0.10.35-1 ii libgtk2.0-0 2.24.10-1 ii libgtkspell0 2.0.13-2 ii libice6 2:1.0.5-1 ii libpango1.0-0 1.30.0-1 ii libpurple0 2.10.1-1 ii libsm6 2:1.1.0-2 ii libx11-6 2:1.4.99.901-2 ii libxml2 2.8.0+dfsg1-5 ii libxss1 1:1.2.1-2 ii perl-base [perlapi-5.14.2] 5.14.2-11 ii pidgin-data 2.10.1-1 Versions of packages pidgin recommends: ii gstreamer0.10-plugins-base 0.10.29-4 ii gstreamer0.10-plugins-good 0.10.22-1 Versions of packages pidgin suggests: pn evolution-data-server <none> pn gnome-panel | kdebase-workspace-bin | docker <none> ii libsqlite3-0 3.7.13-1 -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org