Pidgin versions affected by CVE-2012-2214
Mark Doliner
mark at kingant.net
Mon Jun 25 02:36:41 EDT 2012
Hi Tyler. I just did a little digging and I believe Pidgin 2.6.6 and
2.7.11 are both not vulnerable to CVE-2012-2214
(http://www.pidgin.im/news/security/?id=62). I believe the
vulnerability was introduced in changeset 31742:e6eb15f2734b on May 3,
2011, which is after 2.7.11 was released.
So you shouldn't need to backport to those builds. Thanks!
--Mark
More information about the security
mailing list