elements from HTML. * Require Python 3 for generating the D-Bus bindings. * Fix an issue where pasting
tags as line breaks when pasting.
* Reverted pidgin.im#17232.
It caused more harm than good.
+ Bonjour:
* Always use port fallback for IPv4 addresses.
+ XMPP:
* Support for XEP-0198 Stream Management.
* Decrease delay for file transfer using streamhosts.
+ Voice & Video:
* Improve webcam failure handling.
* Show error when creating media pipeline fails.
* Clip audio level reporting (pidgin.im#14426).
* Keep track of devices managed by GstDeviceMonitor.
* Ignore PulseAudio monitors.
* Backport native Voice & Video prefs from 3.0.
* Fix building against GStreamer 0.10.
* Fix initial delay on incoming audio.
* Properly cleanup timeouts.
* Add an audio mixer so mixed sources don't cause a pipe
failure.
* Add screen share support for Wayland via XDP Portal.
* Handle unplug and replug events of selected media device.
- Rebase pidgin-nonblock-common.patch.
- Drop pidgin-enable-sni-gnutls.patch,
pidgin-Leaky-deprecation-clean-ups.patch: fixed upstream.
- Drop pidgin-ncurses-6.0-accessors.patch: moved to the libgnt
package.
- Drop support for openSUSE older than Leap 15.0. - No longer recommend -lang: supplements are in use - Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
deprecation of GParameter that result in build failures of
plugins that build with -Werror (pidgin.im#17415). - Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
legacy symbol is no longer maintained and pidgin is not yet
ready to move to libnm. As a side-effect, we no longer depend on
NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm. - Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
avoid SSL handshake failure, patch written by Tiago Herrmann
(therrmann@suse.com) (bsc#1086439, pidgin.im#17300). - Instead of removing the libjabber.so, liboscar.so symlinks, move
them to the devel package. - Update to version 2.13.0:
+ libpurple:
* Unified string comparison.
* Properlly shell escape URI's when opening them.
* Fix a one byte buffer overread in function
purple_markup_linkify.
* Fix an issue were utf8 was incorrectly truncated which could
lead to crashes as we were potentially feeding garbage into
glib/gtk.
+ libgnt:
* Partially fix building against curses 6.0 with opaque
structs set (pidgin.im#16764).
* Fix a crash when resizing the window (pidgin.im#16680).
+ General:
* Fix a bashism in autotools (pidgin.im#16836).
+ XMPP:
* Show XEP-0066 OOB URLs in any message, not just headlines.
* Fix a user after free (pidgin.im#17200).
* Remove pipelining from BOSH connections (pidgin.im#17025).
* Don't try to TLS already secured BOSH connections
(pidgin.im#17270).
+ IRC:
* Fix "Registration timeout" on SASL auth with InspIRCd
servers (and possibly others not based on
charybdis/ratbox/ircd-seven).
* Fix issues with plugins that modify outgoing messages (such
as the custom PART/QUIT feature of the IRC More plugin).
* Fix IRC buffer handling (pidgin.im#12562).
* Properly handle AUTHENTICATE as a normal command with server
prefix.
* Fix a crash caused by a use after free of the MOTD.
* Fix an out of bounds read in irc_nick_skip_mode.
* Fix a write of a single byte before the start of a buffer in
irc_parse_ctcp.
+ Pidgin:
* Better support for dark themes (pidgin.im#12572).
* Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
* Only write buddy icons to the cache if they're not already
cached.
* Rejoin persistent chats after reconnect (pidgin.im#15687).
* Make the WIN32 Transparency plugin work on all platforms
(pidgin.im#3124).
* Ensure search results buttons are labelled.
* Fix matching unicode emoticons (pidgin.im#17232).
* Correctly update mute/unmute status when the remote side
mutes/unmutes us (pidgin.im#17273).
* Rework the status icon blinking to not use deprecated API
(pidgin.im#17174).
* Do not allow adding a buddy to protocols that don't have an
add_buddy callback.
+ Finch:
* Fix handling of search results (pidgin.im#17238).
+ Voice & Video:
* Port backend-fs to newer api for farstream relay-info
property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
upstream. - Add pidgin-2.10.11-purple-remote-python3.patch: port
purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2. - Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11. - Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
enabling opaque-panels. Pidgin should not access internal
structures of ncurses. - Remove pidgin-crash-missing-gst-registry.patch: is useless now
and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
pidgin-nonblock-common.patch. - Add purple-import-empathy Recommends for SLE15 (FATE#322984). - Correct the licence to GPL-2.0. - Explicitly require python2 - Drop dependency over silc-toolkit-devel as we want to remove
it from the distribution - Update to version 2.12.0 (FATE#323136):
+ libpurple:
- Fix an out of bounds memory read in
purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
- Fix the use of uninitialised memory if running
non-debug-enabled versions of glib.
- Update AIM dev and dist ID's to new ones that were assigned
by AOL.
- TLS certificate verification now uses SHA-256 checksums.
- Fix the SASL external auth for Freenode (boo#1009974).
- Remove the MSN protocol plugin. It has been unusable and
dormant for some time.
- Remove the Mxit protocol plugin. The service was closed at
the end ofSeptember 2016.
- Remove the MySpaceIM protocol plugin. The service has been
defunct for a long time (pidgin.im#15356).
- Remove the Yahoo! protocol plugin. Yahoo has completely
reimplemented their protocol, so this version is no longer
operable as of August 5th, 2016.
- Remove the Facebook (XMPP) account option. According to
https://developers.facebook.com/docs/chat the XMPP Chat API
service ended April 30th, 2015.
- Fix gnutls certificate validation errors that mainly
affected Google.
+ General:
- Replace instances of d.pidgin.im with developer.pidgin.im and
update the urls to use https (pidgin.im#17036).
+ IRC:
- Fix an issue of messages being silently cut off at 500
characters. Large messages are now split into parts and sent
one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated - Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
(fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
in %files with exclusions. - Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well. - Add pidgin-sasl-skip-external.patch:
Backport upstream commit 6106566. Makes Freenode and other
servers that prefer SASL EXTERNAL fingerprint authentication
work again (bsc#1009974). - Drop additional pkgconfig require (already implicitly detected),
but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh. - Update to GNOME 3.20.2 Fate#318572
+ Drop pidgin-CVE-2014-3695 (bsc#902409): fixed upstream.
+ Drop pidgin-CVE-2014-3696 (bsc#902410): fixed upstream.
+ Drop pidgin-CVE-2014-3698 (bsc#902408): fixed upstream. - Update to version 2.11.0:
+ General:
- 2.10.12 was accidentally released with new additions to the
API and should have been released as 2.11.0. Unfortunately,
we did not catch the mistake until after 2.10.12 was released,
but we're fixing it now.
See ChangeLog.API for more information.
- Include the Mozilla certificate bundle. This fixes connecting
to servers with certificates from Let's Encrypt.
- Remove all 1024-bit CAs.
+ libpurple:
- media: Fix an issue with ximagesink displaying only a corner
cut-out of a larger webcam video.
- mediamanager: Update output window destruction so that it
reflects recent changes in the media pipeline structure.
- Ported Instantbird's CommandUiOps to libpurple.
+ Pidgin:
- Fix pidgin.im#14962.
- Fix alignment of incoming right-to-left messages in protocols
that don't support rich text.
- Fix a potential crash while exiting Pidgin.
+ AIM: Add support for the newer kerberos-based authentication of
AIM 8.x.
+ ICQ: Stop truncating passwords to 8 characters like old ICQ
clients did (pidgin.im#16692).
If you actually needed this, truncate your password manually by
pressing backspace a few times.
+ IRC: Base64-decode SASL messages before passing to libsasl
(pidgin.im#16268).
+ MXit:
- Fix a buffer overflow (TALOS-CAN-0120).
- Fix a remote out-of-bounds read (TALOS-CAN-0123, TALOS-CAN-0140).
- Fix a remote out-of-band read (TALOS-CAN-0138, TALOS-CAN-0135).
- Fix an invalid read (TALOS-CAN-0118).
- Fix a remote buffer overflow vulnerability (TALOS-CAN-0119).
- Fix a directory traversal issue (TALOS-CAN-0128).
- Fix a remote denial of service vulnerability that could result
in a null pointer dereference (TALOS-CAN-0133).
- Fix a remote denial of service that could result in an
out-of-bounds read (TALOS-CAN-0134).
- Fix multiple remote buffer overflows (TALOS-CAN-0136).
- Fix a remote null pointer dereference (TALOS-CAN-0137).
- Fix a remote code execution issue discovered (TALOS-CAN-0142).
- Fix a remote denial of service vulnerability in contact mood
handling (TALOS-CAN-0141).
- Fix a remote out-of-bounds write vulnerability
(TALOS-CAN-0139).
- Fix a remote out-of-bounds read (TALOS-CAN-0143).
- Clean pidgin-gnome-keyring.patch up a bit. - Update to 2.10.12:
+ General:
- purple-url-handler now works with Python 3.x.
- Fix an issue where transient startup statuses could be
deleted (pidgin.im#16762).
+ Pidgin: The shout smile now matches the default theme.
+ Gadu-Gadu: Update internal libgadu to version 1.12.1.
- Use tarball signing.
- Rebase pidgin-gnome-keyring.patch.
- Remove pidgin-2.10.11-add-dtmf-support.patch,
pidgin-2.10.11-gst-references.patch,
pidgin-2.10.11-send-video-enum.patch,
pidgin-2.10.11-application-media.patch,
pidgin-2.10.11-init-media-optional.patch,
pidgin-2.10.11-fix-sound-play-fd-leak.patch,
pidgin-2.10.11-private-media.patch and
pidgin-port-to-gst-1.0.patch: added upstream. - Add pidgin-ncurses-6.0-accessors.patch: Fix build with NCurses
6.0 with WINDOW_OPAQUE set to 1 (pidgin.im#16764). - Add pidgin-2.10.11-fix-sound-play-fd-leak.patch: fix a file
desriptor leak while playing sound files
(pidgin.im#16752, boo#942818).
- Remove GConf schemas generation: GConf is considered obsolete.
- Make perl dependency less strict. - Fix build with earlier openSUSE. - Add a Recommends: gstreamer-plugins-good, this plugin provides
wav support that pidgin needs. - Re-attempt port to GStreamer 1.0 (based on work by David):
+ Add patches, from upstream:
- pidgin-port-to-gst-1.0.patch
- pidgin-2.10.11-gst-references.patch
- pidgin-2.10.11-add-dtmf-support.patch
- pidgin-2.10.11-application-media.patch
- pidgin-2.10.11-init-media-optional.patch
- pidgin-2.10.11-send-video-enum.patch
- pidgin-2.10.11-private-media.patch
+ Replace gstreamer-0_10-devel and
gstreamer-0_10-plugins-base-devel BuildRequires with
pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-video-1.0) and
pkgconfig(farstream-0.2).
+ Switch --disable-vv configure paramter to --enable-vv.
+ Pass --with-gstreamer=1.0 to configure. - Remove pidgin-ssl-cache.patch: testing with the usual suspects in
irc land suggests this workaround is no longer necessary - Add patches to address CVE issues:
+ pidgin-CVE-2014-3698: bnc#902408: remote information leak via
crafted XMPP message.
+ pidgin-CVE-2014-3696: bnc#902410: denial of service parsing
Groupwise server message.
+ pidgin-CVE-2014-3695: bnc#902409: crash in MXit protocol
plug-in. - Update to version 2.10.11:
+ General:
- Fix handling of Self-Signed SSL/TLS Certificates when using
the NSS plugin (pidgin.im#16412).
- Improve default cipher suites used with the NSS plugin
(pidgin.im#16262).
- Add NSS Preferences plugin which allows the SSL/TLS Versions
and cipher suites to be configured (pidgin.im#8061).
+ Gadu-Gadu:
- Fix a bug that prevented plugin to load when compiled without
GnuTLS (pidgin.im#16431).
- Fix build for platforms without AF_LOCAL definition
(pidgin.im#16404).
+ MSN:
- Fix broken login due to server change (pidgin.im#16451,
pidgin.im#16455).
- Fail early when buddy list is unavailable instead of wasting
bandwidth endlessly re-trying. - Remove pidgin-mono-buildfix.patch: Mono bindings are deprecated
upstream and no plugin exists making use of them.
- Rebase pidgin-gnome-keyring.patch.
- Make openSUSE 11.1 (SLE 11) minimal requirement.
- Remove obsoletions of gaim: incredibly old.
- Move Tango and NLD emoticons to separate packages.
- Spec cleanup. - Update to version 2.10.10:
+ General:
- Check the basic constraints extension when validating
SSL/TLS certificates. This fixes a security hole that allowed
a malicious man-in-the-middle to impersonate an IM server or
any other https endpoint. This affected both the NSS and
GnuTLS plugins (CVE-2014-3694, boo#902495).
- Allow and prefer TLS 1.2 and 1.1 when using the NSS plugin
for SSL (im#15909).
+ libpurple3 compatibility:
- Encrypted account passwords are preserved until the new one
is set.
- Fix loading Google Talk and Facebook XMPP accounts.
+ Windows-Specific Changes: Don't allow overwriting arbitrary
files on the file system when the user installs a smiley theme
via drag-and-drop (CVE-2014-3697).
+ Finch: Fix build against Python 3 (im#15969).
+ Gadu-Gadu: Updated internal libgadu to version 1.12.0.
+ Groupwise: Fix potential remote crash parsing server message
that indicates that a large amount of memory should be
allocated (CVE-2014-3696, boo#902410).
+ IRC: Fix a possible leak of unencrypted data when using /me
command with OTR (im#15750).
+ MXit: Fix potential remote crash parsing a malformed emoticon
response (CVE-2014-3695, boo#902409).
+ XMPP:
- Fix potential information leak where a malicious XMPP server
and possibly even a malicious remote user could create a
carefully crafted XMPP message that causes libpurple to send
an XMPP message containing arbitrary memory (CVE-2014-3698,
boo#902408).
- Fix Facebook XMPP roster quirks (im#15041, im#15957).
+ Yahoo: Fix login when using the GnuTLS library for TLS
connections (im#16172, boo#874606).
- Drop pidgin-gstreamer1.patch: causes crashes and Video still does
not work (boo#853038). Drop BuildRequires conditions switching to
GStreamer 1.0.
- Rebase pidgin-crash-missing-gst-registry.patch. libpurple-meanwhile sheep66 1652103574 2.14.8 2.14.8-150400.3.3.1 2.14.8-150400.3.3.1 2.14.8 libsametime.so /usr/lib64/purple-2/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:24153/SUSE_SLE-15-SP4_Update/aa70f055fc6c68c93437842ba41e7925-pidgin.SUSE_SLE-15-SP4_Update cpio xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ababdae703a30f1b1fbba50fc2d4900ccc716661, stripped P R R R R R R R R 8Voz utf-8 6e46400e49389d0dcca37e22b7adbd5ddea754b2b5a04075cfb9471dd221827c ? 7zXZ
! t/g{]
crv9w - r3w)-!r;M.*f\s.ЋWMsxG\D:Lv 7q7 Nuqfnu X }\^!јw֓ w TvAmY{ 4 Il M c (ve>*"qSe 1*T(a
˩ofߗ%kWi =wo`d ݓqRN(jrMIU
ѦUNzx C¹
@$\̪h)cýt
fBnae - Yj#|\U
U(ĥx[E:80aF <U_!O\{(V
ie]_of&\]!F g]z "UNaol}~|Cb+n&z>GO$f /g<,Zƺյ /j:K'\+i/;` o[B
n#}~%YVEyMD6xa:w mvn3d 9M~>4|/|Xސ
2?~|r'#bupw;ˌ,q94E?* ]VWC49tU| i{>72JcuW, rr3ghݗ85c?RDo
a;T(}_ 2X Z[%r}eJͯ&UH}*аP7$Hg{N x??pIfm
atP߿E(>Y&'w|EDz\x_Oq^t{D 3mS\5T\m[߭w
^T[桦l
/aVY2,F|Y@!*V~VPUT'[}$M:O6-d`uۓ#ܧWZgQ
+,e xqtFBKFE67>Ci^C|v7~^u ?%rTHh0Hl( Bт_Dզ-<,]Qs nҩ~ WKPQvI[ ?^r(@U#( '^ڕ3mb> |/VPEQǢ"@ +g͋k͊
"V
""A|3"zB-#ai]Ը.y3amfi&F)
m u71yB?lѣF~TYsAw#>?]BNGScv:K `Oq舆Y-=Zs mTk&Cb
펫CzZO5`qSݟن9z '7O+#ּ?x$B&賑;;WejQDa { } @w#|w !$[2kcafjGhYx>ġ~6MXk]ZW/b'}y덡U :/n[OG:β'OJLwױOx&-$s5зNo+){`'I]%MUCbHֳ[P%x/_:G q'~C,B"=߈:YI 'Zᅤ~m)c
10 ]gh b0р :ٕK p[P!OC'*,iB< ](JWT[{# ~&9b z _\>9yXp# G8ς57N4uDd{G.FnrGFwW5O
46˕_Oۅ\ ɝOpYú]w}H鮝u-
(*n'\%p F?A7?_> PKP[?*z#ZC c[Wi2NvD%Z﹇L̲L)+z=
KT{Oc6A2tW#`ZAҍĖU>|Z+{rزt^Zf7 mI۰^6Sy"V:$#XB d5:hЏ5ѫ8߱n2E/OƇ*[d^:)/ ^&N3_P=o{%2.<"FQD띵
l,XcGZquo=Dn?cX8Y0o3c ;yO$ݽDV9IGm k` * ^"M i@Ү(PYWok@lh|n #1yF1Fu _$ً| E3Ƹת\c#!ü)04@t9T0y]Q_Ѵ!|H4b|LT QUu7&v? vn_ed_bi}er~ v9oc
0T@Gl{ҎJ`h%z QnU,O t*|M[zX`NvL78_&V5E##XHjݝ'x h[nP@aKޅ4a 8hQ|IᡟJ{J8g)r Ɯ&6xrHl`%d)4p,ဨӋW ZRbFH;i}7' 8sDޚ=аM 11:2 j%*5`fkXzRLjopF2-O1G*L~CX]FrF0$!NJCg7Mo_ wp 8KK;&/3K !];Lp\1 I-$x5v0 3;H ri5vZV
s+v7zBGUG}x` i%H{l0c #Tzݔo!$=|5>b!`W36 MC.{{
!q"4ꥭe&(N3 A5B 5_oVd#d:js7x,ϱFd¡M g^G))6+