Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.
{ "binaries": [ { "binary_version": "1:2.10.9-0ubuntu3.4", "binary_name": "finch" }, { "binary_version": "1:2.10.9-0ubuntu3.4", "binary_name": "finch-dev" }, { "binary_version": "1:2.10.9-0ubuntu3.4", "binary_name": "libpurple-bin" }, { "binary_version": "1:2.10.9-0ubuntu3.4", "binary_name": "libpurple-dev" }, { "binary_version": "1:2.10.9-0ubuntu3.4", "binary_name": "libpurple0" }, { "binary_version": "1:2.10.9-0ubuntu3.4", "binary_name": "pidgin" }, { "binary_version": "1:2.10.9-0ubuntu3.4", "binary_name": "pidgin-data" }, { "binary_version": "1:2.10.9-0ubuntu3.4", "binary_name": "pidgin-dev" } ] }