Hi James! Wanted to let you know that we JUST released Pidgin 2.10.0 which contains a fix for the problem you described. We do not yet have a CVE number. I'm about to send an email to the oss-security mailing list and ask about it. Thanks, Mark