ibpurple security vulnerability

[Mark Doliner]

On Tue, Jul 28, 2009 at 9:11 AM, Erik Test<erik.shiken at gmail.com> wrote:
>> Hi,
>>
>> We want to report a serious security bug in libpurple. Would you provide
>> us some pidgin contact to handle the communications and fix the issue?
>
> Couldn't you submit a bug report to Pidgin?

We prefer that security problems are emailed directly to developers.
Our bug tracker is public and has no way of marking a ticket as
confidential.  And we prefer not to disclose security problems until
after we're able to release a fix, and distribute that fix to Linux
distributions.

Thanks,
Mark