# HG changeset patch # User John Bailey # Date 1287287868 0 # Node ID 27cc079535d2445472f16f71d2e560d42eae5963 # Parent 943fce8ef142d1265ab892ef0ddd1999fb4bb71b ChangeLog that last commit. diff -r 943fce8ef142 -r 27cc079535d2 ChangeLog --- a/ChangeLog Sun Oct 17 03:55:04 2010 +0000 +++ b/ChangeLog Sun Oct 17 03:57:48 2010 +0000 @@ -7,6 +7,10 @@ (#12049) * Add Deutsche Telekom, Thawte Primary, and Go Daddy Class 2 root CAs (#12667, #12668, and #12594) + * Fix CVE-2010-3711 by properly validating return values from the + purple_base64_decode() function before using them. + * Fix two local crash bugs by properly validating return values from the + purple_base16_decode() function before using them. libpurple: * Fall back to an ordinary request if a UI does not support showing a