Brian Lu wrote:
Any know about this?
Please see http://developer.pidgin.im/wiki/SecurityVulnerabilityProcess
This security issues seems to have been made public in violation of the
reporting guidelines. That often happens for self promotion reasons.
2.6.4 is too recent for anyone to justify release on the basis that the
developers were being unreasonably slow.
As you can see from that link you will not get any useful response until
patches have been issued to packagers, and they have been given a chance
to create fixed ones.
Please note that I am not on the security mailing list, so I have no
access to privileged information on this subject.
Note to the authors of the guidelines; "We take XXXX seriously" are
discredited words in stock replies. You really need to back them up by
real statistics on time to fix. Every marketing department uses this
sort of form of words, often when the reality of the organisation is
very different, although I believe that Pidgin developers really will
treat problems seriously.
--
David Woolley
Emails are not formal business letters, whatever businesses may want.
RFC1855 says there should be an address here, but, in a world of spam,
that is no longer good advice, as archive address hiding may not work.
_______________________________________________
Support@pidgin.im mailing list
Want to unsubscribe? Use this link:
http://pidgin.im/cgi-bin/mailman/listinfo/support
