security review and patches for libpurple

Jacob Appelbaum jacob at
Mon Jul 18 12:11:14 EDT 2011

On 07/17/2011 09:58 PM, Ethan Blanton wrote:
> With that in mind, I'd like to ask again if there are any objections
> to my committing these patches to ipp without embargo or a coordinated
> release.  If not, I will land them some time tomorrow.  If anyone even
> simply thinks we should wait a few days or get additional input before
> landing them, that's fine, too.

I would really strongly encourage you to co-ordinate with the Adium
folks. It seems to me that they're behind on libpurple updates and any
new security releases that don't go into Adium may cause Mac OS X users
major trouble.

All the best,

More information about the security mailing list