/pidgin/main: 82ec5fb22ce9: Add ChangeLog entry for datallah's 2...
Mark Doliner
mark at kingant.net
Tue Jan 28 10:38:11 EST 2014
Changeset: 82ec5fb22ce9ca5cdea0f9da0807d2085ebd2730
Author: Mark Doliner <mark at kingant.net>
Date: 2014-01-12 13:08 -0800
Branch: release-2.x.y
URL: https://hg.pidgin.im/pidgin/main/rev/82ec5fb22ce9
Description:
Add ChangeLog entry for datallah's 2a77da513a03
diffstat:
ChangeLog | 12 ++++++++----
1 files changed, 8 insertions(+), 4 deletions(-)
diffs (45 lines):
diff --git a/ChangeLog b/ChangeLog
--- a/ChangeLog
+++ b/ChangeLog
@@ -7,7 +7,7 @@ version 2.10.8:
libpurple:
* Fix buffer overflow when parsing a malformed HTTP response with
- chunked Transfer-Encoding. (discovered by Matt Jones, Volvent)
+ chunked Transfer-Encoding. (Discovered by Matt Jones, Volvent)
(CVE-2014-NNNN)
* Fix handling of SSL certificates without subjects when using libnss.
* Fix handling of SSL certificates with timestamps in the distant future
@@ -34,7 +34,7 @@ version 2.10.8:
Gadu-Gadu:
* Fix buffer overflow with remote code execution potential. Only
triggerable by a Gadu-Gadu server or a man-in-the-middle.
- (discovered by Yves Younan, Sourcefire VRT) (CVE-2014-NNNN)
+ (Discovered by Yves Younan, Sourcefire VRT) (CVE-2014-NNNN)
* Disabled buddy list import/export from/to server (it didn't work
anymore). Buddy list synchronization will be implemented in 3.0.0.
@@ -43,9 +43,13 @@ version 2.10.8:
* Fix bug where IRC wasn't available when libpurple was compiled with
Cyrus SASL support. (#15517)
+ MSN:
+ * Fix possible crash when sending very long messages. Not
+ remotely-triggerable. (Discovered by Matt Jones, Volvent)
+
MXit:
* Fix buffer overflow with remote code execution potential.
- (discovered by Sourcefire VRT) (CVE-2014-NNNN)
+ (Discovered by Sourcefire VRT) (CVE-2014-NNNN)
* Fix sporadic crashes that can happen after user is disconnected.
* Fix crash when attempting to add a contact via search results.
* Show error message if file transfer fails.
@@ -57,7 +61,7 @@ version 2.10.8:
SIMPLE:
* Fix buffer overflow with remote code execution potential.
- (discovered by Sourcefire VRT) (CVE-2014-NNNN)
+ (Discovered by Sourcefire VRT) (CVE-2014-NNNN)
XMPP:
* Fix possible crash or other erratic behavior when selecting a very
More information about the Commits
mailing list