Skip to content
OpenAdvisories
Unscored RHSA-2013:0646 3 CVEs

Red Hat Security Advisory: pidgin security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Fixed packages 43

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client finch 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::client finch-devel 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::client libpurple 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::client libpurple-devel 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::client libpurple-perl 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::client libpurple-tcl 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::client pidgin 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-debuginfo 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-devel 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-docs 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-perl 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::server finch 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::server finch-devel 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::server libpurple 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::server libpurple-devel 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::server libpurple-perl 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::server libpurple-tcl 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::server pidgin 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-debuginfo 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-devel 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-docs 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-perl 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::workstation finch 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::workstation finch-devel 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple-devel 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple-perl 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple-tcl 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-debuginfo 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-devel 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-docs 0:2.7.9-10.el6_4.1
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-perl 0:2.7.9-10.el6_4.1
Red Hat · Rhel Productivity 5 rhel_productivity:5 finch 0:2.6.6-17.el5_9.1
Red Hat · Rhel Productivity 5 rhel_productivity:5 finch-devel 0:2.6.6-17.el5_9.1
Red Hat · Rhel Productivity 5 rhel_productivity:5 libpurple 0:2.6.6-17.el5_9.1
Red Hat · Rhel Productivity 5 rhel_productivity:5 libpurple-devel 0:2.6.6-17.el5_9.1
Red Hat · Rhel Productivity 5 rhel_productivity:5 libpurple-perl 0:2.6.6-17.el5_9.1
Red Hat · Rhel Productivity 5 rhel_productivity:5 libpurple-tcl 0:2.6.6-17.el5_9.1
Red Hat · Rhel Productivity 5 rhel_productivity:5 pidgin 0:2.6.6-17.el5_9.1
Red Hat · Rhel Productivity 5 rhel_productivity:5 pidgin-debuginfo 0:2.6.6-17.el5_9.1
Red Hat · Rhel Productivity 5 rhel_productivity:5 pidgin-devel 0:2.6.6-17.el5_9.1
Red Hat · Rhel Productivity 5 rhel_productivity:5 pidgin-perl 0:2.6.6-17.el5_9.1

Vulnerabilities 3

  • Unscored —

    Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to exe…

  • Unscored —

    sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user I…

  • Unscored —

    upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows re…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=910040
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=910041
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=910042
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0646.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-0272
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0272
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0272
  • article
    http://www.pidgin.im/news/security/?id=66
  • report
    https://access.redhat.com/security/cve/CVE-2013-0273
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0273
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0273
  • article
    http://www.pidgin.im/news/security/?id=67
  • report
    https://access.redhat.com/security/cve/CVE-2013-0274
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0274
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0274
  • article
    http://www.pidgin.im/news/security/?id=68