Skip to content
OpenAdvisories
Unscored RHSA-2011:0616 2 CVEs

Red Hat Security Advisory: pidgin security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 33

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client finch 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::client finch-devel 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::client libpurple 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::client libpurple-devel 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::client libpurple-perl 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::client libpurple-tcl 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::client pidgin 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-debuginfo 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-devel 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-docs 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-perl 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::server finch 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::server finch-devel 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::server libpurple 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::server libpurple-devel 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::server libpurple-perl 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::server libpurple-tcl 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::server pidgin 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-debuginfo 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-devel 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-docs 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-perl 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation finch 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation finch-devel 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple-devel 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple-perl 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple-tcl 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-debuginfo 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-devel 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-docs 0:2.7.9-3.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-perl 0:2.7.9-3.el6

Vulnerabilities 2

  • Unscored —
    CVE-2011-1091

    libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated use…

    pidgin Debian
  • Unscored —
    CVE-2011-4922

    cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which mi…

    pidgin Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    http://developer.pidgin.im/wiki/ChangeLog
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=633860
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=640170
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=683031
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=684685
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0616.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-1091
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1091
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1091
  • report
    https://access.redhat.com/security/cve/CVE-2011-4922
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4922
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4922