pidgin/ljfisher-ssl-client-auth
Clone
Summary
Browse
Changes
Graph
ChangeLog with CVE for #14636
release-2.x.y
2011-10-04, Ethan Blanton
323975c94f79
Parents
69372ee4f474
Children
cfe7f9066963
ChangeLog with CVE for #14636
1 files changed, 6 insertions(+), 0 deletions(-)
+6
-0
ChangeLog
--- a/ChangeLog Fri Sep 30 01:31:04 2011 +0000
+++ b/ChangeLog Tue Oct 04 18:34:40 2011 +0000
@@ -1,5 +1,11 @@
Pidgin and Finch: The Pimpin' Penguin IM Clients That're Good for the Soul
+version 2.10.1 (??/??/????):
+ SILC:
+ * Fix CVE-2011-3594, by UTF-8 validating incoming messages before
+ passing them to glib or libpurple. Identified by Diego Bauche
+ Madero from IOActive. (#14636)
+
version 2.10.0 (08/18/2011):
Pidgin:
* Make the max size of incoming smileys a pref instead of hardcoding it.