pidgin.2.x.y: efec3dc7: ChangeLog with CVE for #14636

elb at pidgin.im elb at pidgin.im
Tue Oct 4 14:40:47 EDT 2011


----------------------------------------------------------------------
Revision: efec3dc757b27366c8b23ca5c0bf1d8605084798
Parent:   7eb1f6d56cc58bbb5b56b7df53955d36b9b419b8
Author:   elb at pidgin.im
Date:     10/04/11 14:34:40
Branch:   im.pidgin.pidgin.2.x.y
URL: http://d.pidgin.im/viewmtn/revision/info/efec3dc757b27366c8b23ca5c0bf1d8605084798

Changelog: 

ChangeLog with CVE for #14636

Changes against parent 7eb1f6d56cc58bbb5b56b7df53955d36b9b419b8

  patched  ChangeLog

-------------- next part --------------
============================================================
--- ChangeLog	b26029e9f70252ca07092892b5cf02f3a6acee50
+++ ChangeLog	5309e61660ecc7114cba51f6be5e2767f108ea0b
@@ -1,5 +1,11 @@ Pidgin and Finch: The Pimpin' Penguin IM
 Pidgin and Finch: The Pimpin' Penguin IM Clients That're Good for the Soul
 
+version 2.10.1 (??/??/????):
+	SILC:
+	* Fix CVE-2011-3594, by UTF-8 validating incoming messages before
+	  passing them to glib or libpurple.  Identified by Diego Bauche
+	  Madero from IOActive.  (#14636)
+
 version 2.10.0 (08/18/2011):
 	Pidgin:
 	* Make the max size of incoming smileys a pref instead of hardcoding it.


More information about the Commits mailing list