Description

If a user in a multi-user chat room has a nickname containing <br> then libpurple ends up having two users with username in the room, and Finch crashes in this situation. We do not believe there is a possibility of remote code execution.

Mitigation

Correctly parse <br> so that it appears literally rather than as .