Skip to content
OpenAdvisories
Unscored RHSA-2009:1453 4 CVEs

Red Hat Security Advisory: pidgin security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 62

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as finch 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as finch-devel 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as libpurple 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as libpurple-devel 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as libpurple-perl 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as libpurple-tcl 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as pidgin 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as pidgin-debuginfo 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as pidgin-devel 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::as pidgin-perl 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop finch 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop finch-devel 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop libpurple 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop libpurple-devel 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop libpurple-perl 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop libpurple-tcl 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop pidgin 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop pidgin-debuginfo 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop pidgin-devel 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop pidgin-perl 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es finch 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es finch-devel 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es libpurple 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es libpurple-devel 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es libpurple-perl 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es libpurple-tcl 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es pidgin 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es pidgin-debuginfo 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es pidgin-devel 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::es pidgin-perl 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws finch 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws finch-devel 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws libpurple 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws libpurple-devel 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws libpurple-perl 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws libpurple-tcl 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws pidgin 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws pidgin-debuginfo 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws pidgin-devel 0:2.6.2-2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws pidgin-perl 0:2.6.2-2.el4
Red Hat · RHEL 5 enterprise_linux:5::client finch 0:2.6.2-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client libpurple 0:2.6.2-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client libpurple-perl 0:2.6.2-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client libpurple-tcl 0:2.6.2-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client pidgin 0:2.6.2-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client pidgin-debuginfo 0:2.6.2-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client pidgin-perl 0:2.6.2-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation finch-devel 0:2.6.2-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libpurple-devel 0:2.6.2-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation pidgin 0:2.6.2-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation pidgin-debuginfo 0:2.6.2-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation pidgin-devel 0:2.6.2-2.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 finch 0:2.6.2-2.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 finch-devel 0:2.6.2-2.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 libpurple 0:2.6.2-2.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 libpurple-devel 0:2.6.2-2.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 libpurple-perl 0:2.6.2-2.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 libpurple-tcl 0:2.6.2-2.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 pidgin 0:2.6.2-2.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 pidgin-debuginfo 0:2.6.2-2.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 pidgin-devel 0:2.6.2-2.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 pidgin-perl 0:2.6.2-2.el5

Vulnerabilities 4

  • Unscored —
    CVE-2009-2703

    libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers…

    pidgin Debian
  • Unscored —
    CVE-2009-3026

    protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL…

    pidgin Debian
  • Unscored —
    CVE-2009-3083

    The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before…

    pidgin Debian
  • Unscored —
    CVE-2009-3085

    The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an atte…

    pidgin Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://xmpp.org/rfcs/rfc3920.html#stanzas-semantics-iq
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=519224
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521823
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521832
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521853
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1453.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-2703
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2703
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2703
  • report
    https://access.redhat.com/security/cve/CVE-2009-3026
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3026
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3026
  • report
    https://access.redhat.com/security/cve/CVE-2009-3083
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3083
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3083
  • report
    https://access.redhat.com/security/cve/CVE-2009-3085
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3085
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3085