# HG changeset patch
# Node ID a068e19c4111
# Parent  b4241824a900
diff --git a/hugo/content/about/security/advisories/cve-2016-1000030-00.md b/hugo/content/about/security/advisories/cve-2016-1000030-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-1000030-00.md
@@ -0,0 +1,21 @@
+---
+title: cve-2016-1000030-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-1000030
+summary: X.509 Certificates Improperly Imported
+discoveredBy: Yuan Kang and Suman Jana from Columbia University and Baishakhi Ray from the University of Virginia
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+X.509 certificates may be improperly imported when using GnuTLS.
+
+### Mitigation
+
+Check return values from `gnutls_x509_crt_init()` and
+`gnutls_x509_crt_import()`.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2365-00.md b/hugo/content/about/security/advisories/cve-2016-2365-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2365-00.md
@@ -0,0 +1,21 @@
+---
+title: cve-2016-2365-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2365
+talosReportID: talos-2016-0133
+summary: Pidgin MXIT Markup Command Denial of Service Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A malicious server or man-in-the-middle could trigger a crash.
+
+### Mitigation
+
+Escape the provided filename before using it.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2366-00.md b/hugo/content/about/security/advisories/cve-2016-2366-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2366-00.md
@@ -0,0 +1,21 @@
+---
+title: cve-2016-2366-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2366
+talosReportID: talos-2016-0134
+summary: Pidgin MXIT Table Command Denial of Service Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A malicious server or man-in-the-middle could trigger a crash.
+
+### Mitigation
+
+Validate the data length. Use the correct data types.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2367-00.md b/hugo/content/about/security/advisories/cve-2016-2367-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2367-00.md
@@ -0,0 +1,22 @@
+---
+title: cve-2016-2367-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2367
+talosReportID: talos-2016-0135
+summary: Pidgin MXIT Avatar Length Memory Disclosure Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A malicious user, server, or man-in-the-middle could trigger a crash or
+unexpected writing of data from memory to file.
+
+### Mitigation
+
+Various changes to the chunk decoding.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2368-00.md b/hugo/content/about/security/advisories/cve-2016-2368-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2368-00.md
@@ -0,0 +1,22 @@
+---
+title: cve-2016-2368-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2368
+talosReportID: talos-2016-0136
+summary: Pidgin MXIT g_snprintf Multiple Buffer Overflow Vulnerabilities
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+Data is copied without verifying that it was copied successfully.
+
+### Mitigation
+
+Separate the handling of HTTP headers and body. Check the return value from
+`g_vsnprintf()`.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2369-00.md b/hugo/content/about/security/advisories/cve-2016-2369-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2369-00.md
@@ -0,0 +1,19 @@
+---
+title: cve-2016-2369-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2369
+talosReportID: talos-2016-0137
+summary: Pidgin MXIT CP_SOCK_REC_TERM Denial of Service Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A malicious server or man-in-the-middle could trigger a crash.
+
+### Mitigation
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2370-00.md b/hugo/content/about/security/advisories/cve-2016-2370-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2370-00.md
@@ -0,0 +1,21 @@
+---
+title: cve-2016-2370-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2370
+talosReportID: talos-2016-0138
+summary: Pidgin MXIT Custom Resource Denial of Service Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A malicious server or man-in-the-middle could trigger a crash.
+
+### Mitigation
+
+Various changes to the chunk decoding.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2371-00.md b/hugo/content/about/security/advisories/cve-2016-2371-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2371-00.md
@@ -0,0 +1,22 @@
+---
+title: cve-2016-2371-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2371
+talosReportID: talos-2016-0139
+summary: Pidgin MXIT Extended Profiles Code Execution Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A malicious server or man-in-the-middle could trigger a crash or potentially
+arbitrary code execution.
+
+### Mitigation
+
+Check the field count before accessing fields.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2372-00.md b/hugo/content/about/security/advisories/cve-2016-2372-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2372-00.md
@@ -0,0 +1,22 @@
+---
+title: cve-2016-2372-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2372
+talosReportID: talos-2016-0140
+summary: Pidgin MXIT File Transfer Length Memory Disclosure Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A malicious user, server, or man-in-the-middle could trigger a crash or
+unexpected writing of data from memory to file.
+
+### Mitigation
+
+Various changes to the chunk decoding.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2373-00.md b/hugo/content/about/security/advisories/cve-2016-2373-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2373-00.md
@@ -0,0 +1,21 @@
+---
+title: cve-2016-2373-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2373
+talosReportID: talos-2016-0141
+summary: Pidgin MXIT Contact Mood Denial of Service Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A malicious user, server, or man-in-the-middle could trigger a crash.
+
+### Mitigation
+
+Validate the received value.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2374-00.md b/hugo/content/about/security/advisories/cve-2016-2374-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2374-00.md
@@ -0,0 +1,22 @@
+---
+title: cve-2016-2374-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2374
+talosReportID: talos-2016-0142
+summary: Pidgin MXIT MultiMX Message Code Execution Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A malicious server or man-in-the-middle could trigger a crash or potentially
+arbitrary code execution.
+
+### Mitigation
+
+Validate the incoming message format.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2376-00.md b/hugo/content/about/security/advisories/cve-2016-2376-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2376-00.md
@@ -0,0 +1,21 @@
+---
+title: cve-2016-2376-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2376
+talosReportID: talos-2016-0118
+summary: Pidgin MXIT read stage 0x3 Code Execution Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A malicious server or man-in-the-middle could trigger a crash or potentially arbitrary code execution.
+
+### Mitigation
+
+Verify the size from the packet.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2377-00.md b/hugo/content/about/security/advisories/cve-2016-2377-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2377-00.md
@@ -0,0 +1,21 @@
+---
+title: cve-2016-2377-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2377
+talosReportID: talos-2016-0119
+summary: Pidgin MXIT HTTP Content-Length Buffer Overflow Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A malicious server or man-in-the-middle could trigger a crash.
+
+### Mitigation
+
+Use an unsigned integer.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2378-00.md b/hugo/content/about/security/advisories/cve-2016-2378-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2378-00.md
@@ -0,0 +1,21 @@
+---
+title: cve-2016-2378-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2378
+talosReportID: talos-2016-0120
+summary: Pidgin MXIT get_utf8_string Code Execution Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A malicious server or man-in-the-middle could trigger a crash.
+
+### Mitigation
+
+Use correct data types.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-2380-00.md b/hugo/content/about/security/advisories/cve-2016-2380-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-2380-00.md
@@ -0,0 +1,21 @@
+---
+title: cve-2016-2380-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-2380
+talosReportID: talos-2016-0123
+summary: Pidgin MXIT mxit_convert_markup_tx Information Leak Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A specially crafted local message (by the user or a plugin) could lead to the disclosure of 7 bytes to the server.
+
+### Mitigation
+
+Check the length of the font tag.
+
diff --git a/hugo/content/about/security/advisories/cve-2016-4323-00.md b/hugo/content/about/security/advisories/cve-2016-4323-00.md
new file mode 100644
--- /dev/null
+++ b/hugo/content/about/security/advisories/cve-2016-4323-00.md
@@ -0,0 +1,19 @@
+---
+title: cve-2016-4323-00
+date: 2016-06-21T00:00:00.000Z
+cveNumber: cve-2016-4323
+talosReportID: talos-2016-0128
+summary: Pidgin MXIT Splash Image Arbitrary File Overwrite Vulnerability
+discoveredBy: Yves Younan of Cisco Talos
+fixedInRelease: 2.11.0
+type: security
+layout: cve
+hidden: true
+---
+
+### Description
+
+A malicious server or man-in-the-middle could trigger libpurple to overwrite a local file with the name and contents specified by the attacker.
+
+### Mitigation
+
