pidgin/pidgin

I guess we should get a CVE for this?
release-2.x.y
2014-01-12, Mark Doliner
ed1f9a0c0979
Parents fb25998221c2
Children 93d4bff19574
I guess we should get a CVE for this?
  • +3 -2
    ChangeLog
  • --- a/ChangeLog Sun Jan 12 19:28:24 2014 -0800
    +++ b/ChangeLog Sun Jan 12 19:29:36 2014 -0800
    @@ -6,6 +6,9 @@
    Python 3. (Ashish Gupta) (#15624)
    libpurple:
    + * Fix potential crash if libpurple gets an error attempting to read a
    + reply from a STUN server. (Discovered by Coverity static analysis)
    + (CVE-2014-NNNN)
    * Fix buffer overflow when parsing a malformed HTTP response with
    chunked Transfer-Encoding. (Discovered by Matt Jones, Volvent)
    (CVE-2014-NNNN)
    @@ -14,8 +17,6 @@
    * Fix handling of SSL certificates without subjects when using libnss.
    * Fix handling of SSL certificates with timestamps in the distant future
    when using libnss. (#15586)
    - * Fix potential crash if libpurple gets an error attempting to read a
    - reply from a STUN server.
    * Impose maximum download size for all HTTP fetches.
    Pidgin: