vulnerability CVE-2007-4996:
"MSN nudges sent from unknown buddies can cause libpurple to crash"
Other changes:
libpurple:
* A few build issues on Solaris were fixed.
* Cancelling the password prompt for an account will no longer leave
it in an ambiguous state. (It will be disabled.)
* Fixed an erroneous size display for MSN file transfers. (galt)
* Fixed multiple memory leaks, particularly in XMPP and MySpace protocols
* Fixed remembering proxy preferences and status scores
* Gmail notifications are better tracked
Pidgin:
* Fixed keyboard tab reordering to move tabs one step instead of two.
* You should no longer lose proxy settings when Pidgin is restarted.
* Fixed detection of X11 when compiling
Finch:
* Pressing 'Insert' in the buddylist will bring up the 'Add Buddy'
dialog.
The intltool that comes bundled with libpurple doesn't like NetBSD's
/usr/bin/iconv, so switch libpurple to use intltool from pkgsrc.
ChangeLog:
Version 2.2.0 (09/13/2007):
http://developer.pidgin.im/query?status=closed&milestone=2.2.0
Libpurple:
* New protocol plugin: MySpaceIM (Jeff Connelly, Google Summer of
Code)
* XMPP enhancements. See
http://www.adiumx.com/blog/2007/07/soc-xmpp-update.php (Andreas
Monitzer, Google Summer of Code for Adium)
* Certificate management. Libpurple will validate certificates on
SSL-encrypted protocols (William Ehlhardt, Google Summer of Code)
* Some adjustments were made to fix sending messages when using
the MSN HTTP method. (Laszlo Pandy)
* Yahoo! Chat is fixed.
* Some AIM file transfer issues between Pidgin and other clients
have been fixed. (Kyryll A Mirnenko)
* Properly restore idle status and time for AIM and ICQ accounts
when they reconnect after being disconnected.
Pidgin:
* Insert Horizontal Rules and Strikethrough text from toolbar.
* Option to show protocol icons in the buddy list, from the
Buddies > Show menu. (Justin Heiner)
* Ability to build with native, non-X11 GTK+ on OSX. (Anders
Hasselqvist)
* Remember the 'Enable Sounds' setting for a conversation.
* Right-clicking the empty space in the formatting toolbar
allows you to toggle back to the old "ungrouped" version.
* Protocols supporting account registration via Pidgin now show
a descriptive checkbox instead of a vague "Register" button.
* Fixed a bug where a tab would be shown on single conversations
when tabs were disabled.
Finch:
* Per-conversation mute and logging options (accessible from the menu).
Version 2.1.1 (08/20/2007):
Yahoo:
* Added an account action to open your inbox in the yahoo prpl.
* Added support for Unicode status messages in Yahoo.
* Server-stored aliases for Yahoo. (John Moody)
* Fixed support for Yahoo! doodling.
* Limited support for MSN Messenger contacts
Bonjour:
* Bonjour plugin uses native Avahi instead of Howl
* Bonjour plugin supports Buddy Icons
XMPP:
* Only report conversation close when 'send typing notifications'
preference is turned on (Bob Rossi)
Pidgin:
* Show current outgoing conversation formatting on the font label on
the toolbar
* Slim new redesign of conversation tabs to maximize number of
conversations that can fit in a window
* Tab bar is not visible when only one conversation is open. You can
drag and drop conversations from the infopane.
* Moved "Reset Formatting" toolbar button to Font menu.
* Double click on the infopane to alias buddies and set topics
on chats
* New smiley style
Finch:
* Sound support (Eric Polino)
must be done, and FreeBSD documents sys/types.h. Assume for the
moment that because sys/sysctl.h is a BSD44 feature that all such
systems will have sys/param.h, pending an upstream fix.
Updates of pidgin and finch will follow shortly.
pkgsrc changes are some cleanup and removal of the 900kB patch-ac.
I'm not sure if this will break anything, but nobody knew the reason
of it's existence. Any fallout should be dealt with appropriately instead.
Maintainer reset to pkgsrc-users@ at previous maintainer's wish.
version 2.1.0 (07/28/2007):
libpurple:
* Core changes to allow UIs to use second-granularity for scheduling.
Pidgin and Finch, which use the glib event loop, were changed to use
g_timeout_add_seconds() on glib >= 2.14 when possible. This allows
glib to better group our longer timers to increase power efficiency.
(Arjan van de Ven with Intel Corporation)
* No longer linkifies screennames containing @ signs in join/part
notifications in chats
* With the HTML logger, images in conversations are now saved.
NOTE: Saved images are not yet displayed when loading logs.
* Added support for QIP logs to the Log Reader plugin (Michael Shkutkov)
version 2.0.2 (06/14/2007):
libpurple:
* Moving an ICQ buddy from one group to another no longer
re-requests authorization from that person (Rene Hausleitner)
* Added nullprpl, an example protocol plugin (Ryan Barrett)
* Fixed SOCKS5 bug which caused Jabber file receiving to fail
* Remove MSN's random "Authorization Failed" dialogs
* Fix MSN to correctly detect incorrect passwords and disable the account
* Get User Info on MSN is now more reliable & accurate
* Updated SILC protocol to support SILC Toolkit 1.1 (Pekka Riikonen)
* Fix for some QQ authentication problems
* Fix for building on FreeBSD
* Prevent "Logged in:" times for AIM buddies being ridiculously high
* Updates and fixes to Bonjour support
* Improve ICQ encoding support for some non-latin languages
