# HG changeset patch # User Paul Aurich # Date 1262975393 0 # Node ID 168d4a071323c251ad7ed8e4d4efcdf578c7b65d # Parent a94b530cf3b791d48a573b46f9287963dfd76a5f Changelog the reason for this release. diff -r a94b530cf3b7 -r 168d4a071323 ChangeLog --- a/ChangeLog Fri Jan 08 01:40:33 2010 +0000 +++ b/ChangeLog Fri Jan 08 18:29:53 2010 +0000 @@ -13,6 +13,10 @@ * Messages from some mobile clients are no longer displayed as Chinese characters (broken in 2.6.4) + MSN: + * Fix an issue allowing a remote user to download arbitrary files from + a libpurple client. (CVE-2010-0013) + XMPP: * Do not crash when attempting to register for a new account on Windows. * Fix file transfer with clients that do not support Entity Capabilities