Skip to content
OpenAdvisories
Unscored RHSA-2014:0139 13 CVEs

Red Hat Security Advisory: pidgin security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 45

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client finch 0:2.6.6-32.el5
Red Hat · RHEL 5 enterprise_linux:5::client libpurple 0:2.6.6-32.el5
Red Hat · RHEL 5 enterprise_linux:5::client libpurple-perl 0:2.6.6-32.el5
Red Hat · RHEL 5 enterprise_linux:5::client libpurple-tcl 0:2.6.6-32.el5
Red Hat · RHEL 5 enterprise_linux:5::client pidgin 0:2.6.6-32.el5
Red Hat · RHEL 5 enterprise_linux:5::client pidgin-debuginfo 0:2.6.6-32.el5
Red Hat · RHEL 5 enterprise_linux:5::client pidgin-perl 0:2.6.6-32.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation finch-devel 0:2.6.6-32.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libpurple-devel 0:2.6.6-32.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation pidgin 0:2.6.6-32.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation pidgin-debuginfo 0:2.6.6-32.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation pidgin-devel 0:2.6.6-32.el5
Red Hat · RHEL 6 enterprise_linux:6::client finch 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::client finch-devel 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::client libpurple 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::client libpurple-devel 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::client libpurple-perl 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::client libpurple-tcl 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::client pidgin 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-debuginfo 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-devel 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-docs 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::client pidgin-perl 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::server finch 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::server finch-devel 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::server libpurple 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::server libpurple-devel 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::server libpurple-perl 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::server libpurple-tcl 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::server pidgin 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-debuginfo 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-devel 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-docs 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::server pidgin-perl 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation finch 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation finch-devel 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple-devel 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple-perl 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation libpurple-tcl 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-debuginfo 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-devel 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-docs 0:2.7.9-27.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation pidgin-perl 0:2.7.9-27.el6

Vulnerabilities 13

  • Unscored —
    CVE-2012-6152

    The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows rem…

    pidgin Debian
  • Unscored —
    CVE-2013-6477

    Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of ser…

    pidgin Debian
  • Unscored —
    CVE-2013-6478

    gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support for wide Pango layouts, …

    pidgin Debian
  • Unscored —
    CVE-2013-6479

    util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses that are inconsistent …

    pidgin Debian
  • Unscored —
    CVE-2013-6481

    libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash…

    pidgin Debian
  • Unscored —
    CVE-2013-6482

    Pidgin before 2.10.8 allows remote MSN servers to cause a denial of service (NULL pointer dereference and crash) via a …

    pidgin Debian
  • Unscored —
    CVE-2013-6483

    The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in a…

    pidgin Debian
  • Unscored —
    CVE-2013-6484

    The STUN protocol implementation in libpurple in Pidgin before 2.10.8 allows remote STUN servers to cause a denial of s…

    pidgin Debian
  • Unscored —
    CVE-2013-6485

    Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to cause a denial of service …

    pidgin Debian
  • Unscored —
    CVE-2013-6487

    Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remot…

    pidgin libgadu Debian
  • Unscored —
    CVE-2013-6489

    Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of…

    pidgin Debian
  • Unscored —
    CVE-2013-6490 Public exploit EPSS 15%

    The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a n…

    pidgin Debian
  • Unscored —
    CVE-2014-0020

    The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC…

    pidgin Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://www.pidgin.im/news/security/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1056473
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1056479
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1056904
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1056907
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1056908
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1056913
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1056978
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1057481
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1057484
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1057489
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1057490
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1057498
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1057502
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0139.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-6152
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-6152
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-6152
  • article
    http://pidgin.im/news/security/?id=70
  • report
    https://access.redhat.com/security/cve/CVE-2013-6477
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6477
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6477
  • article
    http://pidgin.im/news/security/?id=71
  • report
    https://access.redhat.com/security/cve/CVE-2013-6478
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6478
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6478
  • article
    http://pidgin.im/news/security/?id=72
  • report
    https://access.redhat.com/security/cve/CVE-2013-6479
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6479
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6479
  • article
    http://pidgin.im/news/security/?id=73
  • report
    https://access.redhat.com/security/cve/CVE-2013-6481
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6481
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6481
  • article
    http://pidgin.im/news/security/?id=74
  • report
    https://access.redhat.com/security/cve/CVE-2013-6482
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6482
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6482