[Pidgin] #15295: Pidgin leaks pidgin & libpurple version number & time data.

Pidgin trac at pidgin.im
Wed May 1 10:23:05 EDT 2013


#15295: Pidgin leaks pidgin & libpurple version number & time data.
---------------------------------+-----------------------
 Reporter:  malaparte            |       Owner:  EionRobb
     Type:  plugin request       |      Status:  new
Milestone:                       |   Component:  privacy
  Version:  2.10.6               |  Resolution:
 Keywords:  security, libpurple  |
---------------------------------+-----------------------

Comment (by charge):

 Hey!
 Here is difference for file libpurple/protocols/jabber/iq.c which allows
 report fake software version.

 Name is taken from file ~/.purple/<nick>_<domain>.name
 Version is taken from file ~/.purple/<nick>_<domain>.version

 Affected binary file: libjabber.so.0.0.0
 (/usr/lib/purple-2/libjabber.so.0.0.0).

 I understand that it is ugly, but it can be useful for people not to spend
 time to write same thing.

 Please, smb convert this to plugin or preference!

-- 
Ticket URL: <https://developer.pidgin.im/ticket/15295#comment:8>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list