security fixes for 2.5.6
ari at debian.org
Tue May 12 22:28:56 EDT 2009
Josh Bressers wrote:
>>> 8331e31a fixes a buffer overflow when initiating file transfer with a
>>> client and it sends back malformed response
> Use CVE-2009-1373 for this one.
I've munged this patch to apply cleanly on top of 2.4.3 and removed the
debugging changes. Feel free to tell me if I've missed something
glaring, since I'm not familiar with the bug.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 1685 bytes
Desc: not available
Url : http://pidgin.im/cgi-bin/mailman/private/packagers/attachments/20090512/9932f51a/attachment.bin
More information about the Packagers