merge of 'c51421b3224e49bb240591d090a4daafce1c3b42' release-2.x.y

Tue, 04 Oct 2011 18:34:45 +0000

author
Ethan Blanton <elb@pidgin.im>
date
Tue, 04 Oct 2011 18:34:45 +0000
branch
release-2.x.y
changeset 32050
cfe7f9066963
parent 32049
c51421b3224e (current diff)
parent 32046
323975c94f79 (diff)
child 32051
f73891d4e46c
child 32635
e5450a0ecde6

merge of 'c51421b3224e49bb240591d090a4daafce1c3b42'
and '323975c94f79466109e9be3066e76796edec887a'

--- a/ChangeLog	Sat Oct 01 23:29:40 2011 +0000
+++ b/ChangeLog	Tue Oct 04 18:34:45 2011 +0000
@@ -1,5 +1,11 @@
 Pidgin and Finch: The Pimpin' Penguin IM Clients That're Good for the Soul
 
+version 2.10.1 (??/??/????):
+	SILC:
+	* Fix CVE-2011-3594, by UTF-8 validating incoming messages before
+	  passing them to glib or libpurple.  Identified by Diego Bauche
+	  Madero from IOActive.  (#14636)
+
 version 2.10.0 (08/18/2011):
 	Pidgin:
 	* Make the max size of incoming smileys a pref instead of hardcoding it.

mercurial