Red Hat Security AdvisoryRHSA-2011:0616
pidgin security and bug fix update
Released 2011-05-19 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libpurple-2.7.9-3.el6, pidgin-2.7.9-3.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) finch-2.7.9-3.el6, finch-devel-2.7.9-3.el6, libpurple-devel-2.7.9-3.el6 +6
- Red Hat Enterprise Linux Server Optional (v. 6) finch-2.7.9-3.el6, finch-2.7.9-3.el6.ppc, finch-devel-2.7.9-3.el6 +12
- Red Hat Enterprise Linux Workstation (v. 6) libpurple-2.7.9-3.el6, pidgin-2.7.9-3.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) finch-2.7.9-3.el6, finch-devel-2.7.9-3.el6, libpurple-devel-2.7.9-3.el6 +6
Fixes 2 records
Priority LOW 24
libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.02639 · Published 2011-03-14 · Fixed
Priority LOW 11
cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00308 · Published 2012-08-08 · Partial fix CWE-200
