[Pidgin] #14571: Win32 installer uses insecure GTK+ version

Pidgin trac at pidgin.im
Fri Aug 24 09:38:32 EDT 2012


#14571: Win32 installer uses insecure GTK+ version
--------------------+-------------------------------------------------------
 Reporter:  sdierl  |        Owner:  datallah       
     Type:  defect  |       Status:  new            
Milestone:  3.0.0   |    Component:  winpidgin (gtk)
  Version:  2.10.0  |   Resolution:                 
 Keywords:          |  
--------------------+-------------------------------------------------------

Comment(by datallah):

 Replying to [comment:16 ioerror]:
 > I changed the malformed png a bit:

 <SNIP>

 > It appears that this png doesn't get wiped from disk even though it is
 clearly malformed. Additionally, I only see those decode errors on the
 Windows Pidgin, I do not see them on the Ubuntu Pidgin. I think that means
 that I am hitting the GTK libs that are vulnerable, perhaps?

 The fact that the file is still there there isn't a problem; it's just a
 cached value of what the server sent; we wouldn't want to re-download the
 same data.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/14571#comment:19>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list