pidgin/old.pidgin.im

CVE achievement unlocked.

2012-05-07, Mark Doliner
2aa23c275840
Parents 107a72c03221
Children 2954bd4f438e
CVE achievement unlocked.
--- a/htdocs/ChangeLog Mon May 07 05:29:45 2012 +0000
+++ b/htdocs/ChangeLog Mon May 07 18:07:51 2012 +0000
@@ -1,5 +1,8 @@
Pidgin and Finch: The Pimpin' Penguin IM Clients That're Good for the Soul
+version 2.10.5:
+ No changes
+
version 2.10.4 (05/06/2012):
General:
* Support building against Farstream in addition to Farsight.
@@ -15,7 +18,7 @@
MSN:
* Fix a possible crash when receiving messages with certain characters
or character encodings. Thanks to Fabian Yamaguchi for reporting
- this!
+ this! (CVE-2012-2318)
XMPP:
* Fix a possible crash when receiving a series of specially crafted
--- a/htdocs/news/security/index.php Mon May 07 05:29:45 2012 +0000
+++ b/htdocs/news/security/index.php Mon May 07 18:07:51 2012 +0000
@@ -667,7 +667,7 @@
array(
"title" => "Possible MSN remote crash",
"date" => "2012-05-06",
- "cve" => "",
+ "cve" => "CVE-2012-2318",
"description" => "Incoming messages with certain characters or character encodings can cause clients to crash.",
"fix" => "The contents of all incoming plaintext messages are converted to UTF-8 and validated before used.",
"fixrevisions" => "94cbd5a68ee237c970d8bd6d9d53106f1b9627ad",