[Fwd: Re: [Advisories] Libpurple security vulnerability CORE-2009-0727]

[Warren Togami]

So normally the way vendors work when an embargo is known, we prepare 
our packages, and QA test them, to simultaneously release the binary 
packages on the embargo lift day.

Is the patch against 2.5.8 even finalized now?

If 2.5.9 is truly 2.5.8 + that one patch, then could you bless an 
official 2.5.9 tarball now so we can kick off this process internally 
and be ready for embargo lift day?

Warren Togami
wtogami at redhat.com