Red Hat Security AdvisoryRHSA-2009:1453
pidgin security update
Released 2009-09-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 finch-2.6.2-2.el4, finch-2.6.2-2.el4.i386, finch-2.6.2-2.el4.ia64 +33
- Red Hat Enterprise Linux Desktop (v. 5 client) finch-2.6.2-2.el5, finch-2.6.2-2.el5.i386, libpurple-2.6.2-2.el5 +9
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) finch-devel-2.6.2-2.el5, finch-devel-2.6.2-2.el5.i386, libpurple-devel-2.6.2-2.el5 +4
- Red Hat Enterprise Linux Desktop version 4 finch-2.6.2-2.el4, finch-2.6.2-2.el4.i386, finch-devel-2.6.2-2.el4 +15
- Red Hat Enterprise Linux ES version 4 finch-2.6.2-2.el4, finch-2.6.2-2.el4.i386, finch-2.6.2-2.el4.ia64 +24
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) finch-2.6.2-2.el5, finch-2.6.2-2.el5.i386, finch-devel-2.6.2-2.el5 +15
- Red Hat Enterprise Linux WS version 4 finch-2.6.2-2.el4, finch-2.6.2-2.el4.i386, finch-2.6.2-2.el4.ia64 +24
Fixes 4 records
Priority LOW 28
The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02683 · Published 2009-09-08 · Fixed CWE-119
Priority LOW 27
libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message th…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0192 · Published 2009-09-08 · Fixed CWE-119
Priority LOW 26
The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (applicati…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0169 · Published 2009-09-08 · Fixed
Priority LOW 25
protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01302 · Published 2009-08-31 · Fixed CWE-310
THREATIST.IORead the docs