www: 41b590e5: CVE achievement unlocked.
markdoliner at pidgin.im
markdoliner at pidgin.im
Mon May 7 14:10:51 EDT 2012
----------------------------------------------------------------------
Revision: 41b590e5df5e51c17fb1373573e2a88c208712cc
Parent: 9a284dc77ea26f9ca11abde2d4e274ad7c259634
Author: markdoliner at pidgin.im
Date: 05/07/12 14:07:51
Branch: im.pidgin.www
URL: http://d.pidgin.im/viewmtn/revision/info/41b590e5df5e51c17fb1373573e2a88c208712cc
Changelog:
CVE achievement unlocked.
Changes against parent 9a284dc77ea26f9ca11abde2d4e274ad7c259634
patched htdocs/ChangeLog
patched htdocs/news/security/index.php
-------------- next part --------------
============================================================
--- htdocs/ChangeLog 94f96063e641e1f5249ad36fcbb48b8949b51add
+++ htdocs/ChangeLog 2ce1da10e89b5d92d55eb6e3ec17423f10e35913
@@ -1,5 +1,8 @@ Pidgin and Finch: The Pimpin' Penguin IM
Pidgin and Finch: The Pimpin' Penguin IM Clients That're Good for the Soul
+version 2.10.5:
+ No changes
+
version 2.10.4 (05/06/2012):
General:
* Support building against Farstream in addition to Farsight.
@@ -15,7 +18,7 @@ version 2.10.4 (05/06/2012):
MSN:
* Fix a possible crash when receiving messages with certain characters
or character encodings. Thanks to Fabian Yamaguchi for reporting
- this!
+ this! (CVE-2012-2318)
XMPP:
* Fix a possible crash when receiving a series of specially crafted
============================================================
--- htdocs/news/security/index.php 8022e137bc389c2149b9b0c6607fa3e969737dc7
+++ htdocs/news/security/index.php e1ec63d16cfb6ad1e8844d0ac579f2a969442dfb
@@ -667,7 +667,7 @@ $vulnerabilities = array(
array(
"title" => "Possible MSN remote crash",
"date" => "2012-05-06",
- "cve" => "",
+ "cve" => "CVE-2012-2318",
"description" => "Incoming messages with certain characters or character encodings can cause clients to crash.",
"fix" => "The contents of all incoming plaintext messages are converted to UTF-8 and validated before used.",
"fixrevisions" => "94cbd5a68ee237c970d8bd6d9d53106f1b9627ad",
More information about the Commits
mailing list