Date: Fri, 31 Dec 2010 12:54:48 +0530 From: Huzaifa Sidhpurwala <huzaifas@...hat.com> To: oss-security@...ts.openwall.com CC: Jan Lieskovsky <jlieskov@...hat.com>, "Steven M. Christey" <coley@...us.mitre.org>, John Bailey <rekkanoryo@...kanoryo.org>, Stu Tomlinson <stu@...nilmot.com>, Matthew Barnes <mbarnes@...hat.com> Subject: Re: CVE Request -- Pidgin v2.7.6 <= x <= v2.7.8 -- MSN DirectConnect DoS (crash due NULL ptr dereference) after receiving a short P2P message On 12/27/2010 07:09 PM, Jan Lieskovsky wrote: > Hello Josh, Steve, vendors, > > Pidgin upstream has released the latest v2.7.9 version: >  http://pidgin.im/pipermail/support/2010-December/009251.html > > addressing one security flaw in the MSN protocol: >  http://pidgin.im/news/security/?id=49 > > Upstream changeset: >  > http://developer.pidgin.im/viewmtn/revision/info/aaa07bde3c51d3684391ae6ed86b6dbaeab5d031 > This has been assigned CVE-2010-4528 -- Huzaifa Sidhpurwala / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.