--- a/ChangeLog Mon Mar 24 20:01:11 2014 -0400 +++ b/ChangeLog Mon Apr 07 23:45:55 2014 -0700 @@ -3,7 +3,7 @@ version 2.10.10 (?/?/?): Windows-Specific Changes: * Don't allow overwriting arbitrary files on the file system when the - user installs a smiley theme from a tar file. (Discovered by Yves + user installs a smiley theme via drag-and-drop. (Discovered by Yves Younan of Sourcefire VRT) Finch: @@ -12,6 +12,11 @@ Gadu-Gadu: * Updated internal libgadu to version 1.12.0-rc2. + MXit: + * Fix potential remote crash parsing a malformed emoticon response. + (Discovered by Yves Younan and Richard Johnson of Sourcefire VRT) + (CVE-2014-NNNN) + version 2.10.9 (2/2/2014): XMPP: * Fix problems logging into some servers including jabber.org and