RHSA-2017:1854

Vulnerability from csaf_opensuse - Published: 2017-08-01 14:23 - Updated: 2026-06-30 11:41
Summary
Red Hat Security Advisory: pidgin security, bug fix, and enhancement update
Severity
Moderate
Notes
Topic: An update for pidgin is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. The following packages have been upgraded to a later upstream version: pidgin (2.10.11). (BZ#1369526) Security Fix(es): * A denial of service flaw was found in the way Pidgin's Mxit plug-in handled emoticons. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to crash Pidgin by sending a specially crafted emoticon. (CVE-2014-3695) * A denial of service flaw was found in the way Pidgin parsed Groupwise server messages. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to cause Pidgin to consume an excessive amount of memory, possibly leading to a crash, by sending a specially crafted message. (CVE-2014-3696) * An information disclosure flaw was discovered in the way Pidgin parsed XMPP messages. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to disclose a portion of memory belonging to the Pidgin process by sending a specially crafted XMPP message. (CVE-2014-3698) * An out-of-bounds write flaw was found in the way Pidgin processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process. (CVE-2017-2640) * It was found that Pidgin's SSL/TLS plug-ins had a flaw in the certificate validation functionality. An attacker could use this flaw to create a fake certificate, that Pidgin would trust, which could be used to conduct man-in-the-middle attacks against Pidgin. (CVE-2014-3694) Red Hat would like to thank the Pidgin project for reporting these issues. Upstream acknowledges Yves Younan (Cisco Talos) and Richard Johnson (Cisco Talos) as the original reporters of CVE-2014-3695 and CVE-2014-3696; Thijs Alkemade and Paul Aurich as the original reporters of CVE-2014-3698; and Jacob Appelbaum and Moxie Marlinspike as the original reporters of CVE-2014-3694. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

It was found that Pidgin's SSL/TLS plug-ins had a flaw in the certificate validation functionality. An attacker could use this flaw to create a fake certificate, that Pidgin would trust, which could be used to conduct man-in-the-middle attacks against Pidgin.

CWE-295 - Improper Certificate Validation
Affected products
Product Identifier Version Remediation
Unresolved product id: 7Client-optional:finch-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Client-optional:finch-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional:finch-devel-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client:libpurple-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Client:libpurple-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client:pidgin-0:2.10.11-5.el7.src —
Vendor Fix fix
Unresolved product id: 7Client:pidgin-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-0:2.10.11-5.el7.aarch64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-0:2.10.11-5.el7.ppc —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-0:2.10.11-5.el7.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-0:2.10.11-5.el7.ppc64le —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-0:2.10.11-5.el7.s390 —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-0:2.10.11-5.el7.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-devel-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-devel-0:2.10.11-5.el7.ppc —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-devel-0:2.10.11-5.el7.s390 —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-devel-0:2.10.11-5.el7.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390 —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-0:2.10.11-5.el7.aarch64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-0:2.10.11-5.el7.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-0:2.10.11-5.el7.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x —
Vendor Fix fix
Unresolved product id: 7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server:libpurple-0:2.10.11-5.el7.aarch64 —
Vendor Fix fix
Unresolved product id: 7Server:libpurple-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Server:libpurple-0:2.10.11-5.el7.ppc —
Vendor Fix fix
Unresolved product id: 7Server:libpurple-0:2.10.11-5.el7.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server:libpurple-0:2.10.11-5.el7.ppc64le —
Vendor Fix fix
Unresolved product id: 7Server:libpurple-0:2.10.11-5.el7.s390 —
Vendor Fix fix
Unresolved product id: 7Server:libpurple-0:2.10.11-5.el7.s390x —
Vendor Fix fix
Unresolved product id: 7Server:libpurple-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Server:pidgin-0:2.10.11-5.el7.src —
Vendor Fix fix
Unresolved product id: 7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64 —
Vendor Fix fix
Unresolved product id: 7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc —
Vendor Fix fix
Unresolved product id: 7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64 —
Vendor Fix fix
Unresolved product id: 7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le —
Vendor Fix fix
Unresolved product id: 7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390 —
Vendor Fix fix
Unresolved product id: 7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x —
Vendor Fix fix
Unresolved product id: 7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional:finch-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional:finch-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation:libpurple-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Workstation:libpurple-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation:pidgin-0:2.10.11-5.el7.src —
Vendor Fix fix
Unresolved product id: 7Workstation:pidgin-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Unresolved product id: 7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686 —
Vendor Fix fix
Unresolved product id: 7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64 —
Vendor Fix fix
Threats
Impact Low

A denial of service flaw was found in the way Pidgin's Mxit plug-in handled emoticons. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to crash Pidgin by sending a specially crafted emoticon.

Affected products
Fixed 115 products, the same list as for CVE-2014-3694
Threats
Impact Moderate

A denial of service flaw was found in the way Pidgin parsed Groupwise server messages. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to cause Pidgin to consume an excessive amount of memory, possibly leading to a crash, by sending a specially crafted message.

CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 115 products, the same list as for CVE-2014-3694
Threats
Impact Moderate

An information disclosure flaw was discovered in the way Pidgin parsed XMPP messages. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to disclose a portion of memory belonging to the Pidgin process by sending a specially crafted XMPP message.

CWE-201 - Insertion of Sensitive Information Into Sent Data
Affected products
Fixed 115 products, the same list as for CVE-2014-3694
Threats
Impact Moderate

An out-of-bounds write flaw was found in the way Pidgin processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.

CWE-787 - Out-of-bounds Write
Affected products
Fixed 115 products, the same list as for CVE-2014-3694
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2017:1854 self
https://access.redhat.com/security/updates/classi… external
https://access.redhat.com/documentation/en-US/Red… external
https://bugzilla.redhat.com/show_bug.cgi?id=1154908 external
https://bugzilla.redhat.com/show_bug.cgi?id=1154909 external
https://bugzilla.redhat.com/show_bug.cgi?id=1154910 external
https://bugzilla.redhat.com/show_bug.cgi?id=1154911 external
https://bugzilla.redhat.com/show_bug.cgi?id=1369526 external
https://bugzilla.redhat.com/show_bug.cgi?id=1430019 external
https://bugzilla.redhat.com/show_bug.cgi?id=1439296 external
https://bugzilla.redhat.com/show_bug.cgi?id=1445921 external
https://bugzilla.redhat.com/show_bug.cgi?id=1446368 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2014-3694 self
https://bugzilla.redhat.com/show_bug.cgi?id=1154908 external
https://www.cve.org/CVERecord?id=CVE-2014-3694 external
https://nvd.nist.gov/vuln/detail/CVE-2014-3694 external
https://access.redhat.com/security/cve/CVE-2014-3695 self
https://bugzilla.redhat.com/show_bug.cgi?id=1154909 external
https://www.cve.org/CVERecord?id=CVE-2014-3695 external
https://nvd.nist.gov/vuln/detail/CVE-2014-3695 external
https://access.redhat.com/security/cve/CVE-2014-3696 self
https://bugzilla.redhat.com/show_bug.cgi?id=1154910 external
https://www.cve.org/CVERecord?id=CVE-2014-3696 external
https://nvd.nist.gov/vuln/detail/CVE-2014-3696 external
https://access.redhat.com/security/cve/CVE-2014-3698 self
https://bugzilla.redhat.com/show_bug.cgi?id=1154911 external
https://www.cve.org/CVERecord?id=CVE-2014-3698 external
https://nvd.nist.gov/vuln/detail/CVE-2014-3698 external
https://access.redhat.com/security/cve/CVE-2017-2640 self
https://bugzilla.redhat.com/show_bug.cgi?id=1430019 external
https://www.cve.org/CVERecord?id=CVE-2017-2640 external
https://nvd.nist.gov/vuln/detail/CVE-2017-2640 external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for pidgin is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously.\n\nThe following packages have been upgraded to a later upstream version: pidgin (2.10.11). (BZ#1369526)\n\nSecurity Fix(es):\n\n* A denial of service flaw was found in the way Pidgin\u0027s Mxit plug-in handled emoticons. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to crash Pidgin by sending a specially crafted emoticon. (CVE-2014-3695)\n\n* A denial of service flaw was found in the way Pidgin parsed Groupwise server messages. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to cause Pidgin to consume an excessive amount of memory, possibly leading to a crash, by sending a specially crafted message. (CVE-2014-3696)\n\n* An information disclosure flaw was discovered in the way Pidgin parsed XMPP messages. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to disclose a portion of memory belonging to the Pidgin process by sending a specially crafted XMPP message. (CVE-2014-3698)\n\n* An out-of-bounds write flaw was found in the way Pidgin processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process. (CVE-2017-2640)\n\n* It was found that Pidgin\u0027s SSL/TLS plug-ins had a flaw in the certificate validation functionality. An attacker could use this flaw to create a fake certificate, that Pidgin would trust, which could be used to conduct man-in-the-middle attacks against Pidgin. (CVE-2014-3694)\n\nRed Hat would like to thank the Pidgin project for reporting these issues. Upstream acknowledges Yves Younan (Cisco Talos) and Richard Johnson (Cisco Talos) as the original reporters of CVE-2014-3695 and CVE-2014-3696; Thijs Alkemade and Paul Aurich as the original reporters of CVE-2014-3698; and Jacob Appelbaum and Moxie Marlinspike as the original reporters of CVE-2014-3694.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:1854",
        "url": "https://access.redhat.com/errata/RHSA-2017:1854"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html",
        "url": "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html"
      },
      {
        "category": "external",
        "summary": "1154908",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1154908"
      },
      {
        "category": "external",
        "summary": "1154909",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1154909"
      },
      {
        "category": "external",
        "summary": "1154910",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1154910"
      },
      {
        "category": "external",
        "summary": "1154911",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1154911"
      },
      {
        "category": "external",
        "summary": "1369526",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1369526"
      },
      {
        "category": "external",
        "summary": "1430019",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1430019"
      },
      {
        "category": "external",
        "summary": "1439296",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1439296"
      },
      {
        "category": "external",
        "summary": "1445921",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1445921"
      },
      {
        "category": "external",
        "summary": "1446368",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1446368"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1854.json"
      }
    ],
    "title": "Red Hat Security Advisory: pidgin security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2026-06-30T11:41:47+00:00",
      "generator": {
        "date": "2026-06-30T11:41:47+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.1"
        }
      },
      "id": "RHSA-2017:1854",
      "initial_release_date": "2017-08-01T14:23:14+00:00",
      "revision_history": [
        {
          "date": "2017-08-01T14:23:14+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-08-01T14:23:14+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-30T11:41:47+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Client (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Client (v. 7)",
                  "product_id": "7Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Client Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Client Optional (v. 7)",
                  "product_id": "7Client-optional",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                  "product_id": "7Server-optional",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
                  "product_id": "7Workstation-optional",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
                "product": {
                  "name": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
                  "product_id": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-debuginfo@2.10.11-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-0:2.10.11-5.el7.x86_64",
                "product": {
                  "name": "pidgin-0:2.10.11-5.el7.x86_64",
                  "product_id": "pidgin-0:2.10.11-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin@2.10.11-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-0:2.10.11-5.el7.x86_64",
                "product": {
                  "name": "libpurple-0:2.10.11-5.el7.x86_64",
                  "product_id": "libpurple-0:2.10.11-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple@2.10.11-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-0:2.10.11-5.el7.x86_64",
                "product": {
                  "name": "finch-0:2.10.11-5.el7.x86_64",
                  "product_id": "finch-0:2.10.11-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch@2.10.11-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-perl-0:2.10.11-5.el7.x86_64",
                "product": {
                  "name": "pidgin-perl-0:2.10.11-5.el7.x86_64",
                  "product_id": "pidgin-perl-0:2.10.11-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-perl@2.10.11-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-perl-0:2.10.11-5.el7.x86_64",
                "product": {
                  "name": "libpurple-perl-0:2.10.11-5.el7.x86_64",
                  "product_id": "libpurple-perl-0:2.10.11-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-perl@2.10.11-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-devel-0:2.10.11-5.el7.x86_64",
                "product": {
                  "name": "pidgin-devel-0:2.10.11-5.el7.x86_64",
                  "product_id": "pidgin-devel-0:2.10.11-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-devel@2.10.11-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-tcl-0:2.10.11-5.el7.x86_64",
                "product": {
                  "name": "libpurple-tcl-0:2.10.11-5.el7.x86_64",
                  "product_id": "libpurple-tcl-0:2.10.11-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-tcl@2.10.11-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-devel-0:2.10.11-5.el7.x86_64",
                "product": {
                  "name": "libpurple-devel-0:2.10.11-5.el7.x86_64",
                  "product_id": "libpurple-devel-0:2.10.11-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-devel@2.10.11-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-devel-0:2.10.11-5.el7.x86_64",
                "product": {
                  "name": "finch-devel-0:2.10.11-5.el7.x86_64",
                  "product_id": "finch-devel-0:2.10.11-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch-devel@2.10.11-5.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pidgin-debuginfo-0:2.10.11-5.el7.i686",
                "product": {
                  "name": "pidgin-debuginfo-0:2.10.11-5.el7.i686",
                  "product_id": "pidgin-debuginfo-0:2.10.11-5.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-debuginfo@2.10.11-5.el7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-0:2.10.11-5.el7.i686",
                "product": {
                  "name": "libpurple-0:2.10.11-5.el7.i686",
                  "product_id": "libpurple-0:2.10.11-5.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple@2.10.11-5.el7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-0:2.10.11-5.el7.i686",
                "product": {
                  "name": "finch-0:2.10.11-5.el7.i686",
                  "product_id": "finch-0:2.10.11-5.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch@2.10.11-5.el7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-devel-0:2.10.11-5.el7.i686",
                "product": {
                  "name": "pidgin-devel-0:2.10.11-5.el7.i686",
                  "product_id": "pidgin-devel-0:2.10.11-5.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-devel@2.10.11-5.el7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-devel-0:2.10.11-5.el7.i686",
                "product": {
                  "name": "libpurple-devel-0:2.10.11-5.el7.i686",
                  "product_id": "libpurple-devel-0:2.10.11-5.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-devel@2.10.11-5.el7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-devel-0:2.10.11-5.el7.i686",
                "product": {
                  "name": "finch-devel-0:2.10.11-5.el7.i686",
                  "product_id": "finch-devel-0:2.10.11-5.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch-devel@2.10.11-5.el7?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pidgin-0:2.10.11-5.el7.src",
                "product": {
                  "name": "pidgin-0:2.10.11-5.el7.src",
                  "product_id": "pidgin-0:2.10.11-5.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin@2.10.11-5.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pidgin-debuginfo-0:2.10.11-5.el7.ppc",
                "product": {
                  "name": "pidgin-debuginfo-0:2.10.11-5.el7.ppc",
                  "product_id": "pidgin-debuginfo-0:2.10.11-5.el7.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-debuginfo@2.10.11-5.el7?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-0:2.10.11-5.el7.ppc",
                "product": {
                  "name": "libpurple-0:2.10.11-5.el7.ppc",
                  "product_id": "libpurple-0:2.10.11-5.el7.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple@2.10.11-5.el7?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-0:2.10.11-5.el7.ppc",
                "product": {
                  "name": "finch-0:2.10.11-5.el7.ppc",
                  "product_id": "finch-0:2.10.11-5.el7.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch@2.10.11-5.el7?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-devel-0:2.10.11-5.el7.ppc",
                "product": {
                  "name": "pidgin-devel-0:2.10.11-5.el7.ppc",
                  "product_id": "pidgin-devel-0:2.10.11-5.el7.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-devel@2.10.11-5.el7?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-devel-0:2.10.11-5.el7.ppc",
                "product": {
                  "name": "libpurple-devel-0:2.10.11-5.el7.ppc",
                  "product_id": "libpurple-devel-0:2.10.11-5.el7.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-devel@2.10.11-5.el7?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-devel-0:2.10.11-5.el7.ppc",
                "product": {
                  "name": "finch-devel-0:2.10.11-5.el7.ppc",
                  "product_id": "finch-devel-0:2.10.11-5.el7.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch-devel@2.10.11-5.el7?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
                "product": {
                  "name": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
                  "product_id": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-debuginfo@2.10.11-5.el7?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-0:2.10.11-5.el7.ppc64",
                "product": {
                  "name": "libpurple-0:2.10.11-5.el7.ppc64",
                  "product_id": "libpurple-0:2.10.11-5.el7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple@2.10.11-5.el7?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-0:2.10.11-5.el7.ppc64",
                "product": {
                  "name": "finch-0:2.10.11-5.el7.ppc64",
                  "product_id": "finch-0:2.10.11-5.el7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch@2.10.11-5.el7?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-perl-0:2.10.11-5.el7.ppc64",
                "product": {
                  "name": "pidgin-perl-0:2.10.11-5.el7.ppc64",
                  "product_id": "pidgin-perl-0:2.10.11-5.el7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-perl@2.10.11-5.el7?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-perl-0:2.10.11-5.el7.ppc64",
                "product": {
                  "name": "libpurple-perl-0:2.10.11-5.el7.ppc64",
                  "product_id": "libpurple-perl-0:2.10.11-5.el7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-perl@2.10.11-5.el7?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-devel-0:2.10.11-5.el7.ppc64",
                "product": {
                  "name": "pidgin-devel-0:2.10.11-5.el7.ppc64",
                  "product_id": "pidgin-devel-0:2.10.11-5.el7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-devel@2.10.11-5.el7?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-tcl-0:2.10.11-5.el7.ppc64",
                "product": {
                  "name": "libpurple-tcl-0:2.10.11-5.el7.ppc64",
                  "product_id": "libpurple-tcl-0:2.10.11-5.el7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-tcl@2.10.11-5.el7?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-devel-0:2.10.11-5.el7.ppc64",
                "product": {
                  "name": "libpurple-devel-0:2.10.11-5.el7.ppc64",
                  "product_id": "libpurple-devel-0:2.10.11-5.el7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-devel@2.10.11-5.el7?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-0:2.10.11-5.el7.ppc64",
                "product": {
                  "name": "pidgin-0:2.10.11-5.el7.ppc64",
                  "product_id": "pidgin-0:2.10.11-5.el7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin@2.10.11-5.el7?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-devel-0:2.10.11-5.el7.ppc64",
                "product": {
                  "name": "finch-devel-0:2.10.11-5.el7.ppc64",
                  "product_id": "finch-devel-0:2.10.11-5.el7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch-devel@2.10.11-5.el7?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pidgin-debuginfo-0:2.10.11-5.el7.s390",
                "product": {
                  "name": "pidgin-debuginfo-0:2.10.11-5.el7.s390",
                  "product_id": "pidgin-debuginfo-0:2.10.11-5.el7.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-debuginfo@2.10.11-5.el7?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-0:2.10.11-5.el7.s390",
                "product": {
                  "name": "libpurple-0:2.10.11-5.el7.s390",
                  "product_id": "libpurple-0:2.10.11-5.el7.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple@2.10.11-5.el7?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-0:2.10.11-5.el7.s390",
                "product": {
                  "name": "finch-0:2.10.11-5.el7.s390",
                  "product_id": "finch-0:2.10.11-5.el7.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch@2.10.11-5.el7?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-devel-0:2.10.11-5.el7.s390",
                "product": {
                  "name": "pidgin-devel-0:2.10.11-5.el7.s390",
                  "product_id": "pidgin-devel-0:2.10.11-5.el7.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-devel@2.10.11-5.el7?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-devel-0:2.10.11-5.el7.s390",
                "product": {
                  "name": "libpurple-devel-0:2.10.11-5.el7.s390",
                  "product_id": "libpurple-devel-0:2.10.11-5.el7.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-devel@2.10.11-5.el7?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-devel-0:2.10.11-5.el7.s390",
                "product": {
                  "name": "finch-devel-0:2.10.11-5.el7.s390",
                  "product_id": "finch-devel-0:2.10.11-5.el7.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch-devel@2.10.11-5.el7?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pidgin-debuginfo-0:2.10.11-5.el7.s390x",
                "product": {
                  "name": "pidgin-debuginfo-0:2.10.11-5.el7.s390x",
                  "product_id": "pidgin-debuginfo-0:2.10.11-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-debuginfo@2.10.11-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-0:2.10.11-5.el7.s390x",
                "product": {
                  "name": "libpurple-0:2.10.11-5.el7.s390x",
                  "product_id": "libpurple-0:2.10.11-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple@2.10.11-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-0:2.10.11-5.el7.s390x",
                "product": {
                  "name": "finch-0:2.10.11-5.el7.s390x",
                  "product_id": "finch-0:2.10.11-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch@2.10.11-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-perl-0:2.10.11-5.el7.s390x",
                "product": {
                  "name": "pidgin-perl-0:2.10.11-5.el7.s390x",
                  "product_id": "pidgin-perl-0:2.10.11-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-perl@2.10.11-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-perl-0:2.10.11-5.el7.s390x",
                "product": {
                  "name": "libpurple-perl-0:2.10.11-5.el7.s390x",
                  "product_id": "libpurple-perl-0:2.10.11-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-perl@2.10.11-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-devel-0:2.10.11-5.el7.s390x",
                "product": {
                  "name": "pidgin-devel-0:2.10.11-5.el7.s390x",
                  "product_id": "pidgin-devel-0:2.10.11-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-devel@2.10.11-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-tcl-0:2.10.11-5.el7.s390x",
                "product": {
                  "name": "libpurple-tcl-0:2.10.11-5.el7.s390x",
                  "product_id": "libpurple-tcl-0:2.10.11-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-tcl@2.10.11-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-devel-0:2.10.11-5.el7.s390x",
                "product": {
                  "name": "libpurple-devel-0:2.10.11-5.el7.s390x",
                  "product_id": "libpurple-devel-0:2.10.11-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-devel@2.10.11-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-0:2.10.11-5.el7.s390x",
                "product": {
                  "name": "pidgin-0:2.10.11-5.el7.s390x",
                  "product_id": "pidgin-0:2.10.11-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin@2.10.11-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-devel-0:2.10.11-5.el7.s390x",
                "product": {
                  "name": "finch-devel-0:2.10.11-5.el7.s390x",
                  "product_id": "finch-devel-0:2.10.11-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch-devel@2.10.11-5.el7?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
                "product": {
                  "name": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
                  "product_id": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-debuginfo@2.10.11-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-0:2.10.11-5.el7.ppc64le",
                "product": {
                  "name": "libpurple-0:2.10.11-5.el7.ppc64le",
                  "product_id": "libpurple-0:2.10.11-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple@2.10.11-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-0:2.10.11-5.el7.ppc64le",
                "product": {
                  "name": "finch-0:2.10.11-5.el7.ppc64le",
                  "product_id": "finch-0:2.10.11-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch@2.10.11-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-perl-0:2.10.11-5.el7.ppc64le",
                "product": {
                  "name": "pidgin-perl-0:2.10.11-5.el7.ppc64le",
                  "product_id": "pidgin-perl-0:2.10.11-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-perl@2.10.11-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-perl-0:2.10.11-5.el7.ppc64le",
                "product": {
                  "name": "libpurple-perl-0:2.10.11-5.el7.ppc64le",
                  "product_id": "libpurple-perl-0:2.10.11-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-perl@2.10.11-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-devel-0:2.10.11-5.el7.ppc64le",
                "product": {
                  "name": "pidgin-devel-0:2.10.11-5.el7.ppc64le",
                  "product_id": "pidgin-devel-0:2.10.11-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-devel@2.10.11-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-tcl-0:2.10.11-5.el7.ppc64le",
                "product": {
                  "name": "libpurple-tcl-0:2.10.11-5.el7.ppc64le",
                  "product_id": "libpurple-tcl-0:2.10.11-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-tcl@2.10.11-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-devel-0:2.10.11-5.el7.ppc64le",
                "product": {
                  "name": "libpurple-devel-0:2.10.11-5.el7.ppc64le",
                  "product_id": "libpurple-devel-0:2.10.11-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-devel@2.10.11-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-0:2.10.11-5.el7.ppc64le",
                "product": {
                  "name": "pidgin-0:2.10.11-5.el7.ppc64le",
                  "product_id": "pidgin-0:2.10.11-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin@2.10.11-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-devel-0:2.10.11-5.el7.ppc64le",
                "product": {
                  "name": "finch-devel-0:2.10.11-5.el7.ppc64le",
                  "product_id": "finch-devel-0:2.10.11-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch-devel@2.10.11-5.el7?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
                "product": {
                  "name": "pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
                  "product_id": "pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-debuginfo@2.10.11-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-0:2.10.11-5.el7.aarch64",
                "product": {
                  "name": "libpurple-0:2.10.11-5.el7.aarch64",
                  "product_id": "libpurple-0:2.10.11-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple@2.10.11-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-0:2.10.11-5.el7.aarch64",
                "product": {
                  "name": "finch-0:2.10.11-5.el7.aarch64",
                  "product_id": "finch-0:2.10.11-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch@2.10.11-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-perl-0:2.10.11-5.el7.aarch64",
                "product": {
                  "name": "pidgin-perl-0:2.10.11-5.el7.aarch64",
                  "product_id": "pidgin-perl-0:2.10.11-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-perl@2.10.11-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-perl-0:2.10.11-5.el7.aarch64",
                "product": {
                  "name": "libpurple-perl-0:2.10.11-5.el7.aarch64",
                  "product_id": "libpurple-perl-0:2.10.11-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-perl@2.10.11-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-devel-0:2.10.11-5.el7.aarch64",
                "product": {
                  "name": "pidgin-devel-0:2.10.11-5.el7.aarch64",
                  "product_id": "pidgin-devel-0:2.10.11-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin-devel@2.10.11-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-tcl-0:2.10.11-5.el7.aarch64",
                "product": {
                  "name": "libpurple-tcl-0:2.10.11-5.el7.aarch64",
                  "product_id": "libpurple-tcl-0:2.10.11-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-tcl@2.10.11-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpurple-devel-0:2.10.11-5.el7.aarch64",
                "product": {
                  "name": "libpurple-devel-0:2.10.11-5.el7.aarch64",
                  "product_id": "libpurple-devel-0:2.10.11-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpurple-devel@2.10.11-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pidgin-0:2.10.11-5.el7.aarch64",
                "product": {
                  "name": "pidgin-0:2.10.11-5.el7.aarch64",
                  "product_id": "pidgin-0:2.10.11-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pidgin@2.10.11-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "finch-devel-0:2.10.11-5.el7.aarch64",
                "product": {
                  "name": "finch-devel-0:2.10.11-5.el7.aarch64",
                  "product_id": "finch-devel-0:2.10.11-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/finch-devel@2.10.11-5.el7?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional:finch-0:2.10.11-5.el7.i686"
        },
        "product_reference": "finch-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Client-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional:finch-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "finch-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Client-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-devel-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional:finch-devel-0:2.10.11-5.el7.i686"
        },
        "product_reference": "finch-devel-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Client-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-devel-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "finch-devel-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Client-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-devel-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686"
        },
        "product_reference": "libpurple-devel-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Client-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-devel-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "libpurple-devel-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Client-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-perl-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "libpurple-perl-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Client-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-tcl-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "libpurple-tcl-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Client-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Client-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Client-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-devel-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686"
        },
        "product_reference": "pidgin-devel-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Client-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-devel-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-devel-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Client-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-perl-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-perl-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Client-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client:libpurple-0:2.10.11-5.el7.i686"
        },
        "product_reference": "libpurple-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client:libpurple-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "libpurple-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-0:2.10.11-5.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client:pidgin-0:2.10.11-5.el7.src"
        },
        "product_reference": "pidgin-0:2.10.11-5.el7.src",
        "relates_to_product_reference": "7Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client:pidgin-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-0:2.10.11-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-0:2.10.11-5.el7.aarch64"
        },
        "product_reference": "finch-0:2.10.11-5.el7.aarch64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-0:2.10.11-5.el7.i686"
        },
        "product_reference": "finch-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-0:2.10.11-5.el7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-0:2.10.11-5.el7.ppc"
        },
        "product_reference": "finch-0:2.10.11-5.el7.ppc",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-0:2.10.11-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-0:2.10.11-5.el7.ppc64"
        },
        "product_reference": "finch-0:2.10.11-5.el7.ppc64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-0:2.10.11-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-0:2.10.11-5.el7.ppc64le"
        },
        "product_reference": "finch-0:2.10.11-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-0:2.10.11-5.el7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-0:2.10.11-5.el7.s390"
        },
        "product_reference": "finch-0:2.10.11-5.el7.s390",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-0:2.10.11-5.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-0:2.10.11-5.el7.s390x"
        },
        "product_reference": "finch-0:2.10.11-5.el7.s390x",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "finch-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-devel-0:2.10.11-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64"
        },
        "product_reference": "finch-devel-0:2.10.11-5.el7.aarch64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-devel-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-devel-0:2.10.11-5.el7.i686"
        },
        "product_reference": "finch-devel-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-devel-0:2.10.11-5.el7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc"
        },
        "product_reference": "finch-devel-0:2.10.11-5.el7.ppc",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-devel-0:2.10.11-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64"
        },
        "product_reference": "finch-devel-0:2.10.11-5.el7.ppc64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-devel-0:2.10.11-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le"
        },
        "product_reference": "finch-devel-0:2.10.11-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-devel-0:2.10.11-5.el7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-devel-0:2.10.11-5.el7.s390"
        },
        "product_reference": "finch-devel-0:2.10.11-5.el7.s390",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-devel-0:2.10.11-5.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x"
        },
        "product_reference": "finch-devel-0:2.10.11-5.el7.s390x",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-devel-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "finch-devel-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-devel-0:2.10.11-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64"
        },
        "product_reference": "libpurple-devel-0:2.10.11-5.el7.aarch64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-devel-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686"
        },
        "product_reference": "libpurple-devel-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-devel-0:2.10.11-5.el7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc"
        },
        "product_reference": "libpurple-devel-0:2.10.11-5.el7.ppc",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-devel-0:2.10.11-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64"
        },
        "product_reference": "libpurple-devel-0:2.10.11-5.el7.ppc64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-devel-0:2.10.11-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le"
        },
        "product_reference": "libpurple-devel-0:2.10.11-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-devel-0:2.10.11-5.el7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390"
        },
        "product_reference": "libpurple-devel-0:2.10.11-5.el7.s390",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-devel-0:2.10.11-5.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x"
        },
        "product_reference": "libpurple-devel-0:2.10.11-5.el7.s390x",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-devel-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "libpurple-devel-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-perl-0:2.10.11-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64"
        },
        "product_reference": "libpurple-perl-0:2.10.11-5.el7.aarch64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-perl-0:2.10.11-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64"
        },
        "product_reference": "libpurple-perl-0:2.10.11-5.el7.ppc64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-perl-0:2.10.11-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le"
        },
        "product_reference": "libpurple-perl-0:2.10.11-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-perl-0:2.10.11-5.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x"
        },
        "product_reference": "libpurple-perl-0:2.10.11-5.el7.s390x",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-perl-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "libpurple-perl-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-tcl-0:2.10.11-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64"
        },
        "product_reference": "libpurple-tcl-0:2.10.11-5.el7.aarch64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-tcl-0:2.10.11-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64"
        },
        "product_reference": "libpurple-tcl-0:2.10.11-5.el7.ppc64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-tcl-0:2.10.11-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le"
        },
        "product_reference": "libpurple-tcl-0:2.10.11-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-tcl-0:2.10.11-5.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x"
        },
        "product_reference": "libpurple-tcl-0:2.10.11-5.el7.s390x",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-tcl-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "libpurple-tcl-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-0:2.10.11-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64"
        },
        "product_reference": "pidgin-0:2.10.11-5.el7.aarch64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-0:2.10.11-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64"
        },
        "product_reference": "pidgin-0:2.10.11-5.el7.ppc64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-0:2.10.11-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le"
        },
        "product_reference": "pidgin-0:2.10.11-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-0:2.10.11-5.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-0:2.10.11-5.el7.s390x"
        },
        "product_reference": "pidgin-0:2.10.11-5.el7.s390x",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.ppc",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.s390",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.s390x",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-devel-0:2.10.11-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64"
        },
        "product_reference": "pidgin-devel-0:2.10.11-5.el7.aarch64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-devel-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686"
        },
        "product_reference": "pidgin-devel-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-devel-0:2.10.11-5.el7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc"
        },
        "product_reference": "pidgin-devel-0:2.10.11-5.el7.ppc",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-devel-0:2.10.11-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64"
        },
        "product_reference": "pidgin-devel-0:2.10.11-5.el7.ppc64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-devel-0:2.10.11-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le"
        },
        "product_reference": "pidgin-devel-0:2.10.11-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-devel-0:2.10.11-5.el7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390"
        },
        "product_reference": "pidgin-devel-0:2.10.11-5.el7.s390",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-devel-0:2.10.11-5.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x"
        },
        "product_reference": "pidgin-devel-0:2.10.11-5.el7.s390x",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-devel-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-devel-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-perl-0:2.10.11-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64"
        },
        "product_reference": "pidgin-perl-0:2.10.11-5.el7.aarch64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-perl-0:2.10.11-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64"
        },
        "product_reference": "pidgin-perl-0:2.10.11-5.el7.ppc64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-perl-0:2.10.11-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le"
        },
        "product_reference": "pidgin-perl-0:2.10.11-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-perl-0:2.10.11-5.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x"
        },
        "product_reference": "pidgin-perl-0:2.10.11-5.el7.s390x",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-perl-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-perl-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Server-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-0:2.10.11-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:libpurple-0:2.10.11-5.el7.aarch64"
        },
        "product_reference": "libpurple-0:2.10.11-5.el7.aarch64",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:libpurple-0:2.10.11-5.el7.i686"
        },
        "product_reference": "libpurple-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-0:2.10.11-5.el7.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:libpurple-0:2.10.11-5.el7.ppc"
        },
        "product_reference": "libpurple-0:2.10.11-5.el7.ppc",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-0:2.10.11-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:libpurple-0:2.10.11-5.el7.ppc64"
        },
        "product_reference": "libpurple-0:2.10.11-5.el7.ppc64",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-0:2.10.11-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:libpurple-0:2.10.11-5.el7.ppc64le"
        },
        "product_reference": "libpurple-0:2.10.11-5.el7.ppc64le",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-0:2.10.11-5.el7.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:libpurple-0:2.10.11-5.el7.s390"
        },
        "product_reference": "libpurple-0:2.10.11-5.el7.s390",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-0:2.10.11-5.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:libpurple-0:2.10.11-5.el7.s390x"
        },
        "product_reference": "libpurple-0:2.10.11-5.el7.s390x",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:libpurple-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "libpurple-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-0:2.10.11-5.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:pidgin-0:2.10.11-5.el7.src"
        },
        "product_reference": "pidgin-0:2.10.11-5.el7.src",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.ppc",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.s390",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.s390x",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional:finch-0:2.10.11-5.el7.i686"
        },
        "product_reference": "finch-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Workstation-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "finch-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-devel-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686"
        },
        "product_reference": "finch-devel-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Workstation-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "finch-devel-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "finch-devel-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-devel-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686"
        },
        "product_reference": "libpurple-devel-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Workstation-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-devel-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "libpurple-devel-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-perl-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "libpurple-perl-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-tcl-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "libpurple-tcl-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Workstation-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-devel-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686"
        },
        "product_reference": "pidgin-devel-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Workstation-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-devel-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-devel-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-perl-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-perl-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation:libpurple-0:2.10.11-5.el7.i686"
        },
        "product_reference": "libpurple-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpurple-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation:libpurple-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "libpurple-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-0:2.10.11-5.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation:pidgin-0:2.10.11-5.el7.src"
        },
        "product_reference": "pidgin-0:2.10.11-5.el7.src",
        "relates_to_product_reference": "7Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation:pidgin-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.i686",
        "relates_to_product_reference": "7Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
        },
        "product_reference": "pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "the Pidgin project"
          ]
        },
        {
          "names": [
            "Jacob Appelbaum",
            "Moxie Marlinspike"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-3694",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2014-10-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1154908"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that Pidgin\u0027s SSL/TLS plug-ins had a flaw in the certificate validation functionality. An attacker could use this flaw to create a fake certificate, that Pidgin would trust, which could be used to conduct man-in-the-middle attacks against Pidgin.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pidgin: SSL/TLS plug-ins failed to check Basic Constraints",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-optional:finch-0:2.10.11-5.el7.i686",
          "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Client:libpurple-0:2.10.11-5.el7.i686",
          "7Client:libpurple-0:2.10.11-5.el7.x86_64",
          "7Client:pidgin-0:2.10.11-5.el7.src",
          "7Client:pidgin-0:2.10.11-5.el7.x86_64",
          "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
          "7Server-optional:finch-0:2.10.11-5.el7.i686",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:finch-0:2.10.11-5.el7.s390",
          "7Server-optional:finch-0:2.10.11-5.el7.s390x",
          "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Server:libpurple-0:2.10.11-5.el7.aarch64",
          "7Server:libpurple-0:2.10.11-5.el7.i686",
          "7Server:libpurple-0:2.10.11-5.el7.ppc",
          "7Server:libpurple-0:2.10.11-5.el7.ppc64",
          "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
          "7Server:libpurple-0:2.10.11-5.el7.s390",
          "7Server:libpurple-0:2.10.11-5.el7.s390x",
          "7Server:libpurple-0:2.10.11-5.el7.x86_64",
          "7Server:pidgin-0:2.10.11-5.el7.src",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
          "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Workstation:libpurple-0:2.10.11-5.el7.i686",
          "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
          "7Workstation:pidgin-0:2.10.11-5.el7.src",
          "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
          "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-3694"
        },
        {
          "category": "external",
          "summary": "RHBZ#1154908",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1154908"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3694",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-3694"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3694",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3694"
        }
      ],
      "release_date": "2014-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-08-01T14:23:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nPidgin must be restarted for this update to take effect.",
          "product_ids": [
            "7Client-optional:finch-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Client:libpurple-0:2.10.11-5.el7.i686",
            "7Client:libpurple-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-0:2.10.11-5.el7.src",
            "7Client:pidgin-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Server:libpurple-0:2.10.11-5.el7.aarch64",
            "7Server:libpurple-0:2.10.11-5.el7.i686",
            "7Server:libpurple-0:2.10.11-5.el7.ppc",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
            "7Server:libpurple-0:2.10.11-5.el7.s390",
            "7Server:libpurple-0:2.10.11-5.el7.s390x",
            "7Server:libpurple-0:2.10.11-5.el7.x86_64",
            "7Server:pidgin-0:2.10.11-5.el7.src",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation:libpurple-0:2.10.11-5.el7.i686",
            "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-0:2.10.11-5.el7.src",
            "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1854"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.6,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "7Client-optional:finch-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Client:libpurple-0:2.10.11-5.el7.i686",
            "7Client:libpurple-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-0:2.10.11-5.el7.src",
            "7Client:pidgin-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Server:libpurple-0:2.10.11-5.el7.aarch64",
            "7Server:libpurple-0:2.10.11-5.el7.i686",
            "7Server:libpurple-0:2.10.11-5.el7.ppc",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
            "7Server:libpurple-0:2.10.11-5.el7.s390",
            "7Server:libpurple-0:2.10.11-5.el7.s390x",
            "7Server:libpurple-0:2.10.11-5.el7.x86_64",
            "7Server:pidgin-0:2.10.11-5.el7.src",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation:libpurple-0:2.10.11-5.el7.i686",
            "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-0:2.10.11-5.el7.src",
            "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "pidgin: SSL/TLS plug-ins failed to check Basic Constraints"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Pidgin project"
          ]
        },
        {
          "names": [
            "Richard Johnson",
            "Yves Younan"
          ],
          "organization": "Cisco Talos",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-3695",
      "discovery_date": "2014-10-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1154909"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A denial of service flaw was found in the way Pidgin\u0027s Mxit plug-in handled emoticons. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to crash Pidgin by sending a specially crafted emoticon.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pidgin: crash in Mxit protocol plug-in",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-optional:finch-0:2.10.11-5.el7.i686",
          "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Client:libpurple-0:2.10.11-5.el7.i686",
          "7Client:libpurple-0:2.10.11-5.el7.x86_64",
          "7Client:pidgin-0:2.10.11-5.el7.src",
          "7Client:pidgin-0:2.10.11-5.el7.x86_64",
          "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
          "7Server-optional:finch-0:2.10.11-5.el7.i686",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:finch-0:2.10.11-5.el7.s390",
          "7Server-optional:finch-0:2.10.11-5.el7.s390x",
          "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Server:libpurple-0:2.10.11-5.el7.aarch64",
          "7Server:libpurple-0:2.10.11-5.el7.i686",
          "7Server:libpurple-0:2.10.11-5.el7.ppc",
          "7Server:libpurple-0:2.10.11-5.el7.ppc64",
          "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
          "7Server:libpurple-0:2.10.11-5.el7.s390",
          "7Server:libpurple-0:2.10.11-5.el7.s390x",
          "7Server:libpurple-0:2.10.11-5.el7.x86_64",
          "7Server:pidgin-0:2.10.11-5.el7.src",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
          "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Workstation:libpurple-0:2.10.11-5.el7.i686",
          "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
          "7Workstation:pidgin-0:2.10.11-5.el7.src",
          "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
          "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-3695"
        },
        {
          "category": "external",
          "summary": "RHBZ#1154909",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1154909"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3695",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-3695"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3695",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3695"
        }
      ],
      "release_date": "2014-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-08-01T14:23:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nPidgin must be restarted for this update to take effect.",
          "product_ids": [
            "7Client-optional:finch-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Client:libpurple-0:2.10.11-5.el7.i686",
            "7Client:libpurple-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-0:2.10.11-5.el7.src",
            "7Client:pidgin-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Server:libpurple-0:2.10.11-5.el7.aarch64",
            "7Server:libpurple-0:2.10.11-5.el7.i686",
            "7Server:libpurple-0:2.10.11-5.el7.ppc",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
            "7Server:libpurple-0:2.10.11-5.el7.s390",
            "7Server:libpurple-0:2.10.11-5.el7.s390x",
            "7Server:libpurple-0:2.10.11-5.el7.x86_64",
            "7Server:pidgin-0:2.10.11-5.el7.src",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation:libpurple-0:2.10.11-5.el7.i686",
            "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-0:2.10.11-5.el7.src",
            "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1854"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Client-optional:finch-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Client:libpurple-0:2.10.11-5.el7.i686",
            "7Client:libpurple-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-0:2.10.11-5.el7.src",
            "7Client:pidgin-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Server:libpurple-0:2.10.11-5.el7.aarch64",
            "7Server:libpurple-0:2.10.11-5.el7.i686",
            "7Server:libpurple-0:2.10.11-5.el7.ppc",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
            "7Server:libpurple-0:2.10.11-5.el7.s390",
            "7Server:libpurple-0:2.10.11-5.el7.s390x",
            "7Server:libpurple-0:2.10.11-5.el7.x86_64",
            "7Server:pidgin-0:2.10.11-5.el7.src",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation:libpurple-0:2.10.11-5.el7.i686",
            "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-0:2.10.11-5.el7.src",
            "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "pidgin: crash in Mxit protocol plug-in"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Pidgin project"
          ]
        },
        {
          "names": [
            "Yves Younan",
            "Richard Johnson"
          ],
          "organization": "Cisco Talos",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-3696",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2014-10-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1154910"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A denial of service flaw was found in the way Pidgin parsed Groupwise server messages. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to cause Pidgin to consume an excessive amount of memory, possibly leading to a crash, by sending a specially crafted message.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pidgin: denial of service parsing Groupwise server message",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-optional:finch-0:2.10.11-5.el7.i686",
          "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Client:libpurple-0:2.10.11-5.el7.i686",
          "7Client:libpurple-0:2.10.11-5.el7.x86_64",
          "7Client:pidgin-0:2.10.11-5.el7.src",
          "7Client:pidgin-0:2.10.11-5.el7.x86_64",
          "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
          "7Server-optional:finch-0:2.10.11-5.el7.i686",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:finch-0:2.10.11-5.el7.s390",
          "7Server-optional:finch-0:2.10.11-5.el7.s390x",
          "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Server:libpurple-0:2.10.11-5.el7.aarch64",
          "7Server:libpurple-0:2.10.11-5.el7.i686",
          "7Server:libpurple-0:2.10.11-5.el7.ppc",
          "7Server:libpurple-0:2.10.11-5.el7.ppc64",
          "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
          "7Server:libpurple-0:2.10.11-5.el7.s390",
          "7Server:libpurple-0:2.10.11-5.el7.s390x",
          "7Server:libpurple-0:2.10.11-5.el7.x86_64",
          "7Server:pidgin-0:2.10.11-5.el7.src",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
          "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Workstation:libpurple-0:2.10.11-5.el7.i686",
          "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
          "7Workstation:pidgin-0:2.10.11-5.el7.src",
          "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
          "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-3696"
        },
        {
          "category": "external",
          "summary": "RHBZ#1154910",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1154910"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3696",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-3696"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3696",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3696"
        }
      ],
      "release_date": "2014-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-08-01T14:23:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nPidgin must be restarted for this update to take effect.",
          "product_ids": [
            "7Client-optional:finch-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Client:libpurple-0:2.10.11-5.el7.i686",
            "7Client:libpurple-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-0:2.10.11-5.el7.src",
            "7Client:pidgin-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Server:libpurple-0:2.10.11-5.el7.aarch64",
            "7Server:libpurple-0:2.10.11-5.el7.i686",
            "7Server:libpurple-0:2.10.11-5.el7.ppc",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
            "7Server:libpurple-0:2.10.11-5.el7.s390",
            "7Server:libpurple-0:2.10.11-5.el7.s390x",
            "7Server:libpurple-0:2.10.11-5.el7.x86_64",
            "7Server:pidgin-0:2.10.11-5.el7.src",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation:libpurple-0:2.10.11-5.el7.i686",
            "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-0:2.10.11-5.el7.src",
            "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1854"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Client-optional:finch-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Client:libpurple-0:2.10.11-5.el7.i686",
            "7Client:libpurple-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-0:2.10.11-5.el7.src",
            "7Client:pidgin-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Server:libpurple-0:2.10.11-5.el7.aarch64",
            "7Server:libpurple-0:2.10.11-5.el7.i686",
            "7Server:libpurple-0:2.10.11-5.el7.ppc",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
            "7Server:libpurple-0:2.10.11-5.el7.s390",
            "7Server:libpurple-0:2.10.11-5.el7.s390x",
            "7Server:libpurple-0:2.10.11-5.el7.x86_64",
            "7Server:pidgin-0:2.10.11-5.el7.src",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation:libpurple-0:2.10.11-5.el7.i686",
            "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-0:2.10.11-5.el7.src",
            "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "pidgin: denial of service parsing Groupwise server message"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Pidgin project"
          ]
        },
        {
          "names": [
            "Thijs Alkemade",
            "Paul Aurich"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2014-3698",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "discovery_date": "2014-10-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1154911"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An information disclosure flaw was discovered in the way Pidgin parsed XMPP messages. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to disclose a portion of memory belonging to the Pidgin process by sending a specially crafted XMPP message.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pidgin: remote information leak via crafted XMPP message",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-optional:finch-0:2.10.11-5.el7.i686",
          "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Client:libpurple-0:2.10.11-5.el7.i686",
          "7Client:libpurple-0:2.10.11-5.el7.x86_64",
          "7Client:pidgin-0:2.10.11-5.el7.src",
          "7Client:pidgin-0:2.10.11-5.el7.x86_64",
          "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
          "7Server-optional:finch-0:2.10.11-5.el7.i686",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:finch-0:2.10.11-5.el7.s390",
          "7Server-optional:finch-0:2.10.11-5.el7.s390x",
          "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Server:libpurple-0:2.10.11-5.el7.aarch64",
          "7Server:libpurple-0:2.10.11-5.el7.i686",
          "7Server:libpurple-0:2.10.11-5.el7.ppc",
          "7Server:libpurple-0:2.10.11-5.el7.ppc64",
          "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
          "7Server:libpurple-0:2.10.11-5.el7.s390",
          "7Server:libpurple-0:2.10.11-5.el7.s390x",
          "7Server:libpurple-0:2.10.11-5.el7.x86_64",
          "7Server:pidgin-0:2.10.11-5.el7.src",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
          "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Workstation:libpurple-0:2.10.11-5.el7.i686",
          "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
          "7Workstation:pidgin-0:2.10.11-5.el7.src",
          "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
          "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-3698"
        },
        {
          "category": "external",
          "summary": "RHBZ#1154911",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1154911"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3698",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-3698"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3698",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3698"
        }
      ],
      "release_date": "2014-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-08-01T14:23:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nPidgin must be restarted for this update to take effect.",
          "product_ids": [
            "7Client-optional:finch-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Client:libpurple-0:2.10.11-5.el7.i686",
            "7Client:libpurple-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-0:2.10.11-5.el7.src",
            "7Client:pidgin-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Server:libpurple-0:2.10.11-5.el7.aarch64",
            "7Server:libpurple-0:2.10.11-5.el7.i686",
            "7Server:libpurple-0:2.10.11-5.el7.ppc",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
            "7Server:libpurple-0:2.10.11-5.el7.s390",
            "7Server:libpurple-0:2.10.11-5.el7.s390x",
            "7Server:libpurple-0:2.10.11-5.el7.x86_64",
            "7Server:pidgin-0:2.10.11-5.el7.src",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation:libpurple-0:2.10.11-5.el7.i686",
            "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-0:2.10.11-5.el7.src",
            "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1854"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Client-optional:finch-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Client:libpurple-0:2.10.11-5.el7.i686",
            "7Client:libpurple-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-0:2.10.11-5.el7.src",
            "7Client:pidgin-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Server:libpurple-0:2.10.11-5.el7.aarch64",
            "7Server:libpurple-0:2.10.11-5.el7.i686",
            "7Server:libpurple-0:2.10.11-5.el7.ppc",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
            "7Server:libpurple-0:2.10.11-5.el7.s390",
            "7Server:libpurple-0:2.10.11-5.el7.s390x",
            "7Server:libpurple-0:2.10.11-5.el7.x86_64",
            "7Server:pidgin-0:2.10.11-5.el7.src",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation:libpurple-0:2.10.11-5.el7.i686",
            "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-0:2.10.11-5.el7.src",
            "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "pidgin: remote information leak via crafted XMPP message"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Pidgin project"
          ]
        }
      ],
      "cve": "CVE-2017-2640",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2017-03-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1430019"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write flaw was found in the way Pidgin processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pidgin: Out-of-bounds write in purple_markup_unescape_entity triggered by invalid XML",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-optional:finch-0:2.10.11-5.el7.i686",
          "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Client:libpurple-0:2.10.11-5.el7.i686",
          "7Client:libpurple-0:2.10.11-5.el7.x86_64",
          "7Client:pidgin-0:2.10.11-5.el7.src",
          "7Client:pidgin-0:2.10.11-5.el7.x86_64",
          "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
          "7Server-optional:finch-0:2.10.11-5.el7.i686",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
          "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:finch-0:2.10.11-5.el7.s390",
          "7Server-optional:finch-0:2.10.11-5.el7.s390x",
          "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
          "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
          "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Server:libpurple-0:2.10.11-5.el7.aarch64",
          "7Server:libpurple-0:2.10.11-5.el7.i686",
          "7Server:libpurple-0:2.10.11-5.el7.ppc",
          "7Server:libpurple-0:2.10.11-5.el7.ppc64",
          "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
          "7Server:libpurple-0:2.10.11-5.el7.s390",
          "7Server:libpurple-0:2.10.11-5.el7.s390x",
          "7Server:libpurple-0:2.10.11-5.el7.x86_64",
          "7Server:pidgin-0:2.10.11-5.el7.src",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
          "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
          "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
          "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
          "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
          "7Workstation:libpurple-0:2.10.11-5.el7.i686",
          "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
          "7Workstation:pidgin-0:2.10.11-5.el7.src",
          "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
          "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
          "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-2640"
        },
        {
          "category": "external",
          "summary": "RHBZ#1430019",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1430019"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-2640",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-2640"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-2640",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2640"
        }
      ],
      "release_date": "2017-03-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-08-01T14:23:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nPidgin must be restarted for this update to take effect.",
          "product_ids": [
            "7Client-optional:finch-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Client:libpurple-0:2.10.11-5.el7.i686",
            "7Client:libpurple-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-0:2.10.11-5.el7.src",
            "7Client:pidgin-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Server:libpurple-0:2.10.11-5.el7.aarch64",
            "7Server:libpurple-0:2.10.11-5.el7.i686",
            "7Server:libpurple-0:2.10.11-5.el7.ppc",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
            "7Server:libpurple-0:2.10.11-5.el7.s390",
            "7Server:libpurple-0:2.10.11-5.el7.s390x",
            "7Server:libpurple-0:2.10.11-5.el7.x86_64",
            "7Server:pidgin-0:2.10.11-5.el7.src",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation:libpurple-0:2.10.11-5.el7.i686",
            "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-0:2.10.11-5.el7.src",
            "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1854"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Client-optional:finch-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Client-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Client-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Client:libpurple-0:2.10.11-5.el7.i686",
            "7Client:libpurple-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-0:2.10.11-5.el7.src",
            "7Client:pidgin-0:2.10.11-5.el7.x86_64",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Client:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.s390x",
            "7Server-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.aarch64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.ppc64le",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.s390x",
            "7Server-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Server:libpurple-0:2.10.11-5.el7.aarch64",
            "7Server:libpurple-0:2.10.11-5.el7.i686",
            "7Server:libpurple-0:2.10.11-5.el7.ppc",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64",
            "7Server:libpurple-0:2.10.11-5.el7.ppc64le",
            "7Server:libpurple-0:2.10.11-5.el7.s390",
            "7Server:libpurple-0:2.10.11-5.el7.s390x",
            "7Server:libpurple-0:2.10.11-5.el7.x86_64",
            "7Server:pidgin-0:2.10.11-5.el7.src",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.aarch64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.ppc64le",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.s390x",
            "7Server:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:finch-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:libpurple-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:libpurple-tcl-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-debuginfo-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.i686",
            "7Workstation-optional:pidgin-devel-0:2.10.11-5.el7.x86_64",
            "7Workstation-optional:pidgin-perl-0:2.10.11-5.el7.x86_64",
            "7Workstation:libpurple-0:2.10.11-5.el7.i686",
            "7Workstation:libpurple-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-0:2.10.11-5.el7.src",
            "7Workstation:pidgin-0:2.10.11-5.el7.x86_64",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.i686",
            "7Workstation:pidgin-debuginfo-0:2.10.11-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "pidgin: Out-of-bounds write in purple_markup_unescape_entity triggered by invalid XML"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…