MSN emoticon DoS

[Paul Aurich]

On 2010-05-07 20:18, Stu Tomlinson wrote:
> On Fri, 2010-05-07 at 23:06 -0400, John Bailey wrote:
>> MSNp9 is removed for 2.7.0.  The last release in which MSNp9 was used is 2.4.3.
> 
> The MSN servers do not allow connecting using MSNP9 now anyway, so the
> risk is minimal.

At least one distro "fixed" that change by setting libpurple's
advertised protocol version to MSNP8.  I don't remember if that is in
any currently-receiving-security-support distro releases, though.

~Paul

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 897 bytes
Desc: OpenPGP digital signature
URL: <http://pidgin.im/cgi-bin/mailman/private/packagers/attachments/20100507/c5c71e01/attachment.pgp>