Skip to content
OpenAdvisories
Unscored RHSA-2010:0890 1 CVE

Red Hat Security Advisory: pidgin security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 33

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client finch 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client finch-devel 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client libpurple 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client libpurple-devel 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client libpurple-perl 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client libpurple-tcl 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client pidgin 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-debuginfo 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-devel 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-docs 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-perl 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server finch 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server finch-devel 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server libpurple 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server libpurple-devel 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server libpurple-perl 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server libpurple-tcl 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server pidgin 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-debuginfo 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-devel 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-docs 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-perl 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation finch 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation finch-devel 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple-devel 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple-perl 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple-tcl 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-debuginfo 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-devel 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-docs 0:2.6.6-6.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-perl 0:2.6.6-6.el6_0

Vulnerabilities 1

  • Unscored —

    libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, whic…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=641921
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0890.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-3711
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3711
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3711