I've prepared updated packages for pidgin fixing CVE-2009-3615. However, I need testers who actually use ICQ. Packages are available at http://people.debian.org/~jmm/ for amd64 and i386. Please send feedback directly to jmm@debian.org Cheers, Moritz