Remotely-triggerable crash in libpurple

[Mark Doliner]

On Tue, Jul 20, 2010 at 6:01 AM, Ethan Blanton <elb at pidgin.im> wrote:
> Mark Doliner spake unto us the following wisdom:
>> I think we should do a 2.7.2 now, with nothing but this patch.  August
>> 5th is quite far away for a public crash bug that's so easy to
>> trigger.  We could string freeze now and give translators a week...
>> but that seems rushed, and doesn't give devs a chance to finish any
>> string changes that they may have in mind.
>
> Agreed.

2.7.2 is released and contains this patch.  You can get tarballs from:
https://sourceforge.net/projects/pidgin/files/Pidgin/2.7.2/

Our info about the bug is here:
http://pidgin.im/news/security/?id=47

--Mark