Slashdot Mirror


Pidgin Adds Google Talk Voice and Video Support (and a Vulnerability)

ottothecow writes "While various attempts at video and voice support have been in the pipeline since long before GAIM became Pidgin, fully functioning support over XMPP is on its way. Lifehacker reports that Pidgin 2.6 adds voice and video support for GChat (and presumably any other XMPP network) for Mac and Linux. Windows still has a few bugs but they are being worked on. Pidgin 2.6.1 is only available as source at the moment (but precompiled versions are available at getdeb)." Less happily, an anonymous reader writes "A remote arbitrary-code-execution vulnerability has been found in Libpurple (used by Pidgin and Adium instant messaging clients, among others), which can be triggered by a remote attacker by sending a specially crafted MSNSLP packet with invalid data to the client through the MSN server. No victim interaction is required, and the attacker is not required to be in the victim's buddy list (under default configuration)."

2 of 127 comments (clear)

  1. Re:ouch by Luke+has+no+name · · Score: 4, Insightful

    -1 for not backing up your statement on Pidgin's credibility.

    And good for you that all your contacts reside on GMail, and that you prefer a GMail's web app to a desktop app that centralizes the many forms of communication on the Net. If that works for you, fine. It does not work for me. I want faster response time, a unified UI for all my communication, more flexible message notification, logging, etc. that keeps me in control of my settings and data locally.

    cp -a /home/me/.purple/ /media/Backup/Pidgin/

    I have friends on AIM, Facebook, GMail, and one or two with their own XMPP address. Fortunately, I do not need MSN to contact anyone I know.

  2. Re:How about some autoupdate? by RiotingPacifist · · Score: 4, Insightful

    Right if your running a vulnerable app, you should let it update itself, sigh!

    --
    IranAir Flight 655 never forget!