Remotely-triggerable crash in libpurple

[Tomas Hoger]

Hi!

On Wed, 14 Jul 2010 01:18:24 -0700 Mark Doliner wrote:

> Public: no
> Embargo date: How does August 5th sound?  That gives us one week to
> finish making string changes, one week for translators to translate,
> and one week for us to give you the 2.7.2 tarball and let you prepare
> packages in advance.

We came across:
  https://bugs.gentoo.org/show_bug.cgi?id=328667

which seems to be based on:
  http://repos.archlinux.org/wsvn/packages/pidgin/?op=revision&rev=85620

So not really non-public any more.

-- 
Tomas Hoger / Red Hat Security Response Team