[Advisories] Libpurple security vulnerability CORE-2009-0727

[Luke Schierer]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

To me the biggest question is can we *correctly* fix this issue this  
time around, since, if I read this report correctly, they are  
informing us that our previous fix didn't actually fix.

Given that we can, yes, I'd like to see the fixes come out in about  
the same timeframe as news of the vulnerability.  but I recognize that  
we have historically been really really bad about waiting for a truly  
co-ordinated release.

Luke

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEARECAAYFAkpyV+4ACgkQUsDanPbyGdkzoQCgg1JOm75+1SufxvhQTW0nC9mO
bGwAn1D4efIFVuuOZM4KVyHr52CjZ80T
=gmHX
-----END PGP SIGNATURE-----