It was reported that the libgadu 1.12.0-rc3 release fixes a memory corruption issue, triggered by a crafted response from a file relay server:
http://www.openwall.com/lists/oss-security/2014/05/15/8
A malicious file relay server could possibly use this flaw to execute arbitrary code in an application that uses libgadu.