[Pidgin] #15286: Master bug for old libraries in Windows Pidgin build

[Pidgin]

#15286: Master bug for old libraries in Windows Pidgin build
-----------------------------+----------------------------------------------
 Reporter:  ioerror          |     Owner:  datallah
     Type:  defect           |    Status:  new     
Component:  winpidgin (gtk)  |   Version:  2.10.6  
 Keywords:  security         |  
-----------------------------+----------------------------------------------
 I found at least two (#15284 #15285) libraries shipped by pidgin, in
 addition to the GTK bundle (#14571) that appear to be very old and likely
 contain known vulnerabilities.

 I hacked up a quick dump of the libraries and their apparent compile date.
 Some of the things I've put in bold appears dangerously old - though
 basically everything in this list not from pidgin/libpurple seems
 dangerously old:
 {{{
 exchndl.dll
 Time/Date               Mon Mar 15 20:03:18 2010
 Time/Date stamp                 4b9ef4f6

 freebl3.dll
 Time/Date               Sun Feb 28 15:44:10 2010
 Time/Date stamp                 4b8affca

 libjabber.dll
 Time/Date               Fri Jul  6 09:22:55 2012
 Time/Date stamp                 4ff70f58

 libmeanwhile-1.dll
 Time/Date               Tue Dec  9 17:05:10 2008
 Time/Date stamp                 4924d12b

 libnspr4.dll
 Time/Date               Sun Feb 28 15:40:25 2010
 Time/Date stamp                 4b8afee9

 liboscar.dll
 Time/Date               Fri Jul  6 09:22:55 2012
 Time/Date stamp                 4ff70f9f

 libplc4.dll
 Time/Date               Sun Feb 28 15:40:29 2010
 Time/Date stamp                 4b8afeed

 libplds4.dll
 Time/Date               Sun Feb 28 15:40:26 2010
 Time/Date stamp                 4b8afeea

 libpurple.dll
 Time/Date               Fri Jul  6 09:22:56 2012
 Time/Date stamp                 4ff70f1a

 '''libsasl.dll
 Time/Date               Thu Sep 13 16:02:21 2007
 Time/Date stamp                 46e9c17d'''

 '''libsilc-1-1-2.dll
 Time/Date               Tue Dec  2 20:51:36 2008
 Time/Date stamp                 49361057'''

 '''libsilcclient-1-1-2.dll
 Time/Date               Tue Dec  2 20:51:55 2008
 Time/Date stamp                 4936106b'''

 '''libxml2-2.dll
 Time/Date               Mon Sep 14 09:05:21 2009
 Time/Date stamp                 4aae69c1'''

 libymsg.dll
 Time/Date               Fri Jul  6 09:22:56 2012
 Time/Date stamp                 4ff70fb9

 '''nss3.dll
 Time/Date               Sun Feb 28 15:45:49 2010
 Time/Date stamp                 4b8b002d'''

 '''nssckbi.dll
 Time/Date               Sun Feb 28 15:46:28 2010
 Time/Date stamp                 4b8b0054'''

 '''nssutil3.dll
 Time/Date               Sun Feb 28 15:42:06 2010
 Time/Date stamp                 4b8aff4e'''

 pidgin.dll
 Time/Date               Fri Jul  6 09:22:56 2012
 Time/Date stamp                 4ff7104d

 smime3.dll
 Time/Date               Sun Feb 28 15:46:15 2010
 Time/Date stamp                 4b8b0047

 softokn3.dll
 Time/Date               Sun Feb 28 15:44:17 2010
 Time/Date stamp                 4b8affd1

 sqlite3.dll
 Time/Date               Sun Feb 28 15:42:00 2010
 Time/Date stamp                 4b8aff48

 '''ssl3.dll
 Time/Date               Sun Feb 28 15:46:02 2010
 Time/Date stamp                 4b8b003a
 '''}}}

-- 
Ticket URL: <http://developer.pidgin.im/ticket/15286>
Pidgin <http://pidgin.im>
Pidgin