version 2.10.4 (05/06/2012):
General:
* Support building against Farstream in addition to Farsight.
(Olivier Crete) (#14936)
IRC:
* Disable periodic WHO timer. IRC channel user lists will no
longer automatically display away status, but libpurple will be
much kinder to the network.
* Print unknown numerics to channel windows if we can associate
them. Thanks to Marien Zwart. (#15090)
MSN:
* Fix a possible crash when receiving messages with certain characters
or character encodings. Thanks to Fabian Yamaguchi for reporting
this!
XMPP:
* Fix a possible crash when receiving a series of specially crafted
file transfer requests. Thanks to José Valentín Gutiérrez for
reporting this! (CVE-2012-2214)
Windows-Specific Changes:
* Words added to spell check dictionaries are saved across restarts of
Pidgin (#11886)
(fixes CVE-2011-3594, CVE-2011-4601, CVE-2011-4602, CVE-2011-4603, CVE-2011-4939
and CVE-2012-1178)
version 2.10.3 (03/26/2012):
* Fix buddies not going offline.
version 2.10.2 (03/14/2012):
General:
* Fix compilation when using binutils 2.22 and new GDK pixbuf. (#14799)
* Fix compilation of the MXit protocol plugin with GLib 2.31. (#14773)
Pidgin:
* Add support for the GNOME3 Network dialog. (#13882)
* Fix rare crash. (#14392)
* Add support for the GNOME3 Default Application dialog for configuring
the Browser.
libpurple:
* Support new connection states and signals for NetworkManager 0.9+.
(Dan Williams) (#13859)
AIM and ICQ:
* Fix a possible crash when receiving an unexpected message
from the server. (Thijs Alkemade) (#14983)
* Allow signing on with usernames containing periods and
underscores. (#13500)
* Allow adding buddies containing periods and underscores. (#13500)
* Don't try to format ICQ usernames entered as email addresses.
Gets rid of an "Unable to format username" error at login. (#13883)
MSN:
* Fix possible crashes caused by not validating incoming messages as
UTF-8. (Thijs Alkemade) (#14884)
* Support new protocol version MSNP18. (#14753)
* Fix messages to offline contacts. (#14302)
Windows-Specific Changes:
* Fix the installer downloading of spell-checking dictionaries (#14612)
* Fix compilation of the Bonjour protocol plugin. (#14802)
Plugins:
* The autoaccept plugin will no longer reset the preference for unknown
buddies to "Auto Reject" in certain cases. (#14964)
version 2.10.1 (12/06/2011):
Finch:
* Fix compilation on OpenBSD.
AIM and ICQ:
* Fix remotely-triggerable crashes by validating strings in a few
messages related to buddy list management. Thanks to Evgeny Boger
for reporting this! (#14682)
Bonjour:
* IPv6 fixes (Linus Lüssing)
Gadu-Gadu:
* Fix problems linking against GnuTLS. (#14544)
IRC:
* Fix a memory leak when admitting UTF-8 text with a non-UTF-8 primary
encoding. (#14700)
Jabber:
* Fix crashes and memory leaks when receiving malformed voice
and video requests. Thanks to Thijs Alkemade for reporting this!
Sametime:
* Separate "username" and "server" when adding new Sametime accounts.
(#14608)
* Fix compilation in Visual C++. (#14608)
SILC:
* Fix CVE-2011-3594, by UTF-8 validating incoming messages before
passing them to glib or libpurple. Identified by Diego Bauche
Madero from IOActive. (#14636)
Yahoo!:
* Fetch buddy icons in some cases where we previously weren't. (#13050)
Windows-Specific Changes:
* Fix compilation
version 2.9.0 (06/23/2011):
Pidgin:
* Fix a potential remote denial-of-service bug related to displaying
buddy icons.
* Significantly improved performance of larger IRC channels (regression
introduced in 2.8.0).
* Fix Conversation->Add on AIM and MSN.
* Entries in the chat user list are sorted properly again. This was
inadvertenly broken in 2.8.0.
Finch:
* Fix logging in to ICQ.
libpurple:
* media: Actually use the specified TCP port from the TURN configuration to
create a TCP relay candidate.
AIM and ICQ:
* Fix crashes on some non-mainstream OSes when attempting to
printf("%s", NULL). (Clemens Huebner) (#14297)
Plugins:
* The Evolution Integration plugin compiles again.
version 2.8.0 (06/07/2011):
General:
* Implement simple silence suppression for voice calls, preventing
wasted bandwidth for silent periods during a call. (Jakub Adam)
(half of #13180)
* Added the DigiCert High Assurance CA-3 intermediate CA, needed for
validation of the Facebook XMPP interface's certificate.
* Removed the QQ protocol plugin. It hasn't worked in a long time and
isn't being maintained, therefore we no longer want it.
Pidgin:
* Duplicate code cleanup. (Gabriel Schulhof) (#10599)
* Voice/Video call window adapts correctly to adding or removing
streams on the fly. (Jakub Adam) (half of #13535)
* Don't cancel an ongoing call when rejecting the addition of a
stream to the existing call. (Jakub Adam) (#13537)
* Pidgin plugins can now override tab completion and detect clicks on
usernames in the chat userlist. (kawaii.neko) (#12599)
* Fix the tooltip being destroyed when it is full of information and
cover the mouse (dliang) (#10510)
libpurple:
* media: Allow obtaining active local and remote candidates. (Jakub
Adam) (#11830)
* media: Allow getting/setting video capabilities. (Jakub Adam) (half
of #13095)
* Simple Silence Suppression is optional per-account. (Jakub Adam)
(half of #13180)
* Fix purple-url-handler being unable to find an account.
* media: Allow adding/removing streams on the fly. (Jakub Adam)
(half of #13535)
* Support new connection states in NetworkManager 0.9. (Dan Williams)
(#13505)
* When removing a buddy, delete the pounces associated with it.
(Kartik Mohta) (#1131)
* media: Allow libpurple and plugins to set SDES properties for RTP
conferences. (Jakub Adam) (#12981)
* proxy: Add new "Tor/Privacy" proxy type that can be used to
restrict operations that could leak potentially sensitive data
(e.g. DNS queries). (#11110, #13928)
* media: Add support for using TCP relaying with TURN (will only work with
libnice 0.1.0 and later).
AIM:
* Fix setting icons with dimensions greater than 64x64 pixels by scaling
them down to at most 64x64. (#12874, #13165)
Gadu-Gadu:
* Allow showing your status only to buddies. (Mateusz Piękos) (#13358)
* Updated internal libgadu to version 1.10.1. (Robert Matusewicz,
Krzysztof Klinikowski) (#13525)
* Updated internal libgadu to version 1.11.0. (Tomasz Wasilczyk)
(#14248)
* Suppress blank messages that happen when receiving inline
images. (Tomasz Wasilczyk) (#13554)
* Fix sending inline images to remote users, don't crash when
trying to send large (> 256kB) images. (Tomasz Wasilczyk) (#13580)
* Support typing notifications. (Jan Zachorowski, Tomasz Wasilczyk,
Krzysztof Klinikowski) (#13362, #13590)
* Require libgadu 1.11.0 to avoid using internal libgadu.
* Optional SSL connection support for GNUTLS users (not on Windows
yet!). (Tomasz Wasilczyk) (#13613, #13894)
* Don't count received messages or statuses when determining whether
to send a keepalive packet. (Jan Zachorowski) (#13699)
* Fix a crash when receiving images on Windows or an incorrect
timestamp in the log when receiving images on Linux. (Tomasz
Wasilczyk) (#10268)
* Support XML events, resulting in immediate update of other users'
buddy icons. (Tomasz Wasilczyk) (#13739)
* Accept poorly formatted URLs from other third-party clients in
the same manner as the official client. (Tomasz Wasilczyk)
(#13886)
ICQ:
* Fix setting icons with dimensions greater than 64x64 pixels by scaling
them down to at most 64x64. (#12874, #13165)
* Fix unsetting your mood when "None" is selected. (Dustin Gathmann)
(#11895)
* Ignore Daylight Saving Time when performing calculations related to
birthdays. (Dustin Gathmann) (#13533)
* It is now possible to specify multiple encodings on the Advanced
tab of an ICQ account's settings by using a comma-delimited list.
(Dmitry Utkin) (#13496)
IRC:
* Add "authserv" service command. (tomos) (#13337)
MSN:
* Fix a hard-to-exploit crash in the MSN protocol when using the
HTTP connection method (Reported by Marius Wachtler).
MXit:
* Support for an Invite Message when adding a buddy.
* Fixed bug in splitting-up of messages that contain a lot of links.
* Fixed crash caused by timer not being disabled on disconnect.
(introduced in 2.7.11)
* Clearing of the conversation window now works.
* When receiving an invite you can display the sender's profile
information, avatar image, invite message.
* The Change PIN option was moved into separate action.
* New profile attributes added and shown.
* Update to protocol v6.3.
* Added the ability to view and invite your Suggested Friends,
and to search for contacts.
* Also display the Status Message of offline contacts in their
profile information.
XMPP:
* Remember the previously entered user directory when searching.
(Keith Moyer) (#12451)
* Correctly handle a buddy's unsetting his/her vCard-based avatar.
(Matthew W.S. Bell) (#13370)
* Squash one more situation that resulted in duplicate entries in
the roster (this one where the server reports the buddy as being
in the same (empty) group. (Reported by Danny Mayer)
Plugins:
* The Voice/Video Settings plugin now includes the ability to test
microphone settings. (Jakub Adam) (#13182)
* Fix a crash when handling some saved settings in the Voice/Video
Settings plugin. (Pat Erley) (13290, #13774)
Windows-Specific Changes:
* Fix building libpurple with Visual C++ .NET 2005. This was
accidentally broken in 2.7.11. (Florian Quèze)
* Build internal libgadu using packed structs, fixing several
long-standing Gadu-Gadu issues. (#11958, #6297)
General:
* Our bundled libgadu should now build on HP-UX.
* Fix some instances of file transfers never completing.
Pidgin:
* Sort by Status no longer causes buddies to move around when you click them.
* Fix embedding in the system tray on older GTK+ releases (such as on CentOS
5.5 and older Fedora).
* No longer require libstartup-notification for startup notification support.
GTK+ has included support for years, so use it instead.
AIM:
* Fix a bug where some buddies from your buddy list might not show up.
Affected non-English ICQ users the most.
* Send keepalives for all types of network connections. Will hopefully make
chat rooms more reliable.
MSN:
* Fix bug that prevented added buddies to your buddy list in certain
circumstances.
MXit:
* MXit plugin and reported client version now follow the libpurple version.
* Don't try to request profile information for non-user contacts.
* Allow Re-Invite for contacts in Deleted or Rejected state.
* Ensure we don't send packets too fast to the MXit server and trigger its
flood-detection mechanism. Also increased the internal packet queue to 32
packets.
XMPP:
* Fix building on platforms with an older glib (inadvertantly broken in 2.7.10).
* Don't treat the on-join status storms as 'new arrivals'.
* Extend the /join command to support room JIDs, enabling you to join a room on
any server.
* Add support for receiving a limited amount of history when joining a room
(not currently supported by Pidgin and Finch).
Yahoo!/Yahoo! JAPAN:
* Fix CVE-2011-1091, denials of service caused by NULL pointer dereferences due
to improper handling of malformed YMSG packets.
John: Just a quick release for a security fix here. Elliott has not
yet had a chance to work on the MSN breakage that's been present in
the last couple releases, but we hope he can do it before 2.7.10!
Changes 2.7.8:
Elliott: OK, so I know a few things broke with the last release, and
it's too bad we had to rush it for that silly certificate thing that
the MSN people can't configure properly. I've certainly done a lot of
small fixes this time, but it's too bad we haven't been able to get the
transfers with the official client fixed yet. I promise it'll be in
the next release (barring any quick security issues).
John: So, it's been about a month since we last released. Again, we've
assembled a bugfix release for your enjoyment. While a few commonly
reported bugs remain, particularly in MSN, we're working on it for the
next release. In the meantime, Merry Christmas and enjoy!
Changes 2.7.7:
John: Well, this time around, we should finally have the certificate
issue really and fully fixed for all of you MSN users. Also, we have
a few AIM-related fixes in this release, most notably the fix for the
new "SSL Handshake Failure" message some of you got after upgrading.
That one was an oversight on our part. Enjoy the fixes!
* Lots of little incremental bug fixes and enhancements in this release.
* Finally got some fixes out there for you Yahoo users behind some
particularly annoying firewalls and proxies, among other fixes. Enjoy!
Changes 2.7.2:
* We discovered a security issue in Pidgin 2.7.0 and 2.7.1 and decided to
release a patched version quickly. This release contains the fix for that
crash, and a few other minor fixes.
Update:
chat/finch to 2.6.1
chat/libpurple to 2.6.1
chat/pidgin to 2.6.1
chat/pidgin-sametime to 2.6.1
chat/pidgin-silc to 2.6.1
major changes:
o addition of farsight support for voice/video chats (untested, new option on by default)
o addition of dependency on devel/libidn
o addition of gstreamer option for libpurple (on by default)
version 2.5.3;
Version 2.5.3 (12/20/2008)
* libpurple
o The Buddy State Notification plugin no longer prints duplicate notifications when the same buddy is in multiple groups. (Florian Quèze)
o The Buddy State Notification plugin no longer turns JID's, MSN Passport ID's, etc. into links. (Florian Quèze)
o purple-remote now has a "getstatusmessage" command to retrieve the text of the current status message.
o Various fixes to the nullprpl. (Paul Aurich)
o Fix a crash when accessing the roomlist for an account that's not connected. (Paul Aurich)
o Fix a crash in purple_accounts_delete that happens when this function is called before the buddy list is initialized. (Florian Quèze)
o Fix use of av_len in perl bindings to fix some off-by-one bugs. (Paul Aurich)
o On ICQ, advertise the ICQ 6 typing capability. This should fix the reports of typing notifications not working with third-party clients. (Jaromír Karmazín)
o Many QQ fixes and improvements, including the ability to connect using QQ2008 protocol and sending/receiving of long messages. The recommended version to use is still QQ2005.
o Fix a crash with DNS SRV lookups. (Florian Quèze)
o Fix a crash caused by authorization requests. (Florian Quèze)
* Gadu-Gadu
o Add support for IM images. (Tomasz Sałaciński, Adam Strzelecki)
o Gadu-Gadu now checks that UID's are valid. (Adam Strzelecki)
o Gadu-Gadu now does proper charset translations where needed. (Adam Strzelecki)
* MSN
o Fix an error with offline messages by shipping the new "Microsoft Secure Server Authority" and the "Microsoft Internet Authority" certificates. These are now always installed even when using --with-system-ssl-certs because most systems don't ship those intermediate certificates.
o The Games and Office media can now be set and displayed (in addition to the previous Music media). The Media status text now shows the album, if possible.
o Messages sent from a mobile device while you were offline are now correctly received.
o Server transfers after you've been connected for a long time should now be handled correctly.
o Many improvements to handling of "federated" buddies, such as those on the Yahoo network.
o Several known crashes have been resolved.
o Many other fixes and code cleanup.
* MySpace
o Respect your privacy settings set using the official MySpace client.
o Add support for blocking buddies.
o Fix a bug where buddies didn't appear in their correct groups the first time you sign into your account.
o Properly disconnect and sign out of the service when logging off.
o Support for foreground and background font colors in outgoing IMs.
o Support for background font colors in incoming IMs.
o Many other fixes and code cleanup.
* Sametime
o Fix insanely long idle times for Sametime 7.5 buddies by assuming 0 idle time if the idle timestamp is in the future. (Laurent Montaron)
o Fix a crash that can occur on login. (Raiko Nitzsche)
* SIMPLE
o Fix a crash when a malformed message is received.
o Don't allow connecting accounts if no server name has been specified. (Florian Quèze)
* XMPP
o Fix the namespace URL we look for in PEP reply stanzas to match the URL used in the 'get' requests (Paul Aurich)
o Resources can be set to the local machine's hostname by using __HOSTNAME__ as the resource string. (Jonathan Sailor)
o Resources can now be left blank, causing the server to generate a resource for us where supported. (Jonathan Sailor)
o Resources now default to no value, but "Home" is used if the server refuses to provide a resource.
o Quit trying to get user info for MUC's. (Paul Aurich)
o Send "client-accepts-full-bind-result" attribute during SASL login. This will fix Google Talk login failures if the user configures the wrong domain for his/her account.
o Support new <metadata/> element to indicate no XEP-0084 User Avatar. (Paul Aurich)
o Fix SHA1 avatar checksum errors that occur when one of the bytes in a checksum begins with 0. (Paul Aurich)
o Fix a problem with duplicate buddies. (Paul Aurich)
* Yahoo
o Corrected maximum message lengths for Yahoo!
o Fix file transfers with older Yahoo protocol versions.
* Zephyr
o Enable auto-reply, to emulate 'zaway.' (Toby Schaffer)
o Fix a crash when an account is configured to use tzc but tzc is not installed or the configured tzc command is invalid. (Michael Terry)
o Fix a 10 second delay waiting on tzc if it is not installed or the configured command is invalid. (Michael Terry)
* Pidgin
o On GTK+ 2.14 and higher, we're using the gtk-tooltip-delay setting instead of our own (hidden) tooltip_delay pref. If you had previously changed that pref, add a line like this to ~/.purple/gtkrc-2.0 (where 500 is the timeout (in ms) you want):
gtk-tooltip-timeout = 500
To completely disable tooltips (e.g. if you had an old tooltip_delay of zero), add this to ~/.purple/gtkrc-2.0:
gtk-enable-tooltips = 0
o Moved the release notification dialog to a mini-dialog in the buddylist. (Casey Ho)
o Fix a crash when closing an authorization minidialog with the X then immediately going offline. (Paul Aurich)
o Fix a crash cleaning up custom smileys when Pidgin is closed.
o Fix adding a custom smiley using the context menu in a conversation if no custom smilies have previously been added using the smiley manager.
o Improved support for some message formatting in conversations.
o Allow focusing the coversation history or userlist with F6.
o Fixed the Send Button plugin to avoid duplicate buttons in a single conversation.
o Double-clicking a saved status will now activate it and close the saved status manager, rather than edit the status.
* Finch
o Allow binding meta+arrow keys for actions.
o Added default meta+erase binding for delete previous word.
o Added "Show When Offline" to buddy menus, so a plugin is no longer needed.
Version 2.5.2 (10/19/2008)
* libpurple
o Fixed a crash on removing a custom buddy icon on a buddy.
o Fixed a crash caused by certain self-signed SSL certificates.
o Enable a number of strong ciphers which were previously disabled when using NSS. (Thanks to Marcus Trautwig.)
* Pidgin
o The status selector now saves your message when changing status.
o Fix a case where a conversation window could close unexpectedly.
o A mute sounds option has been added to the preferences window to help with discoverability. CTRL+S is no longer bound to mute.
o Added ability to change the color of visited links (using the theme control plugin, or setting the color in ~/.gtkrc-2.0)
o Fix a crash occuring when a custom smiley is deleted and re-added and used in an open conversation after being re-added.
* Finch
o A new 'Nested Grouping' option in the 'Grouping' plugin. Group hierarchies are defined by the '/' character in the group names.
o A bug was fixed where some key-bindings wouldn't work with some TERMs (e.g. xterm-color, screen-linux etc.)
* MSN
o Operations (such as moving to a new group) on contacts that were added in the same session should now complete correctly, and not cause synchronization errors at next login.
o Minor fixes to login process during a server transfer.
o Restored the "Has You" feature to the MSN protocol tooltips.
o ADL 205/214/etc errors should no longer prevent login.
* XMPP
o Sending and receiving custom smileys using the specification in XEP-0231 (bits of binary) and XHTML-IM
* Yahoo
o Only send a Ping once every hour. This prevents the account from being disconnected from the server periodically.
i) CVE-2008-2927 fix
ii) the previous version was being rejected from the ICQ network.
version 2.4.3 (07/01/2008):
libpurple:
* Yahoo! Japan now uses UTF-8, matching the behavior of official clients
and restoring compatibility with the web messenger (Yusuke Odate)
* Setting your buddy icon once again works for Yahoo! accounts.
* Fixes in the Yahoo! protocol to prevent a double free, crashes on
aliases, and alias functionality
* Fix crashes in the bonjour protocol
* Always use UTF-8 for Yahoo! (#5973)
* Fix a crash when the given jabber id is invalid.
* Make the IRC "unknown message" debugging messages UTF-8 safe.
* Fix connecting to ICQ
* Fix a memleak when handling jabber xforms.
Pidgin:
* Include the send button plugin in the win32 build
* Various memory leak fixes
