Pidgin 2.10.2 released

Mark Doliner mark at kingant.net
Wed Mar 14 14:05:21 EDT 2012


It contains fixes for two security problems.  I've requested CVEs for
both issues from oss-security at lists.openwall.com.

More info:
http://developer.pidgin.im/wiki/ChangeLog
http://pidgin.im/news/security/?id=60
http://pidgin.im/news/security/?id=61

Files:
https://sourceforge.net/projects/pidgin/files/Pidgin/2.10.2/

The 2.x.y branch is our stable branch and we're trying to only include
critical fixes, so it should be fairly safe to upgrade to the newest
version.  However, if you still want to patch an older version with
the fixes, I believe these are the commits you'll want:

For the XMPP issue (issue #60):
http://developer.pidgin.im/viewmtn/revision/info/e30e044988add329e86eaf06a2f6ab1b3c5c47bb

For the MSN issue (issue #61)(I'm actually not sure if you need all of
these... but definitely the first one):
http://developer.pidgin.im/viewmtn/revision/info/18f2f94b625542348af0049e0132a83a1c58aef6
http://developer.pidgin.im/viewmtn/revision/info/395c14cb9ec6322fae27e85095ab2f640fa7c00a
http://developer.pidgin.im/viewmtn/revision/info/2f0f6854241b2f975d10b73095bf46d5e9a8eb01



More information about the Packagers mailing list