Skip to content
OpenAdvisories
Unscored RHSA-2008:1023 3 CVEs

Red Hat Security Advisory: pidgin security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 62

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as finch 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::as finch-devel 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::as libpurple 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::as libpurple-devel 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::as libpurple-perl 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::as libpurple-tcl 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::as pidgin 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::as pidgin-debuginfo 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::as pidgin-devel 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::as pidgin-perl 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop finch 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop finch-devel 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop libpurple 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop libpurple-devel 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop libpurple-perl 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop libpurple-tcl 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop pidgin 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop pidgin-debuginfo 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop pidgin-devel 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop pidgin-perl 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::es finch 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::es finch-devel 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::es libpurple 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::es libpurple-devel 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::es libpurple-perl 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::es libpurple-tcl 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::es pidgin 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::es pidgin-debuginfo 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::es pidgin-devel 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::es pidgin-perl 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::ws finch 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::ws finch-devel 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::ws libpurple 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::ws libpurple-devel 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::ws libpurple-perl 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::ws libpurple-tcl 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::ws pidgin 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::ws pidgin-debuginfo 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::ws pidgin-devel 0:2.5.2-6.el4
Red Hat · RHEL 4 enterprise_linux:4::ws pidgin-perl 0:2.5.2-6.el4
Red Hat · RHEL 5 enterprise_linux:5::client finch 0:2.5.2-6.el5
Red Hat · RHEL 5 enterprise_linux:5::client libpurple 0:2.5.2-6.el5
Red Hat · RHEL 5 enterprise_linux:5::client libpurple-perl 0:2.5.2-6.el5
Red Hat · RHEL 5 enterprise_linux:5::client libpurple-tcl 0:2.5.2-6.el5
Red Hat · RHEL 5 enterprise_linux:5::client pidgin 0:2.5.2-6.el5
Red Hat · RHEL 5 enterprise_linux:5::client pidgin-debuginfo 0:2.5.2-6.el5
Red Hat · RHEL 5 enterprise_linux:5::client pidgin-perl 0:2.5.2-6.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation finch-devel 0:2.5.2-6.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libpurple-devel 0:2.5.2-6.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation pidgin 0:2.5.2-6.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation pidgin-debuginfo 0:2.5.2-6.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation pidgin-devel 0:2.5.2-6.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 finch 0:2.5.2-6.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 finch-devel 0:2.5.2-6.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 libpurple 0:2.5.2-6.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 libpurple-devel 0:2.5.2-6.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 libpurple-perl 0:2.5.2-6.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 libpurple-tcl 0:2.5.2-6.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 pidgin 0:2.5.2-6.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 pidgin-debuginfo 0:2.5.2-6.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 pidgin-devel 0:2.5.2-6.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 pidgin-perl 0:2.5.2-6.el5

Vulnerabilities 3

  • Unscored —
    CVE-2008-2955 Public exploit

    Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain cha…

    pidgin Debian
  • Unscored —
    CVE-2008-2957

    The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of…

    pidgin Debian
  • Unscored —
    CVE-2008-3532

    The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attacker…

    pidgin Debian

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=446562
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=453736
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=453740
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=457907
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=471858
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=472508
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1023.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2955
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2955
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2955
  • report
    https://access.redhat.com/security/cve/CVE-2008-2957
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2957
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2957
  • report
    https://access.redhat.com/security/cve/CVE-2008-3532
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3532
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3532