Update piding 2.10.0, contains security fixes for CVE-2011-2943 and CVE-2011-3184.

While here, better fix for PR#45190.
chat/finch itself does not depend on devel/nspr.
chat/libpurple without gnutls option, libpurple is linked with nspr,
so it must be handle in libpurple/buildlink3.mk.


version 2.10.0 (08/18/2011):
	Pidgin:
	* Make the max size of incoming smileys a pref instead of hardcoding it.
	  (Quentin Brandon) (#5231)
	* Added a plugin information dialog to show information for plugins
	  that aren't otherwise visible in the plugins dialog.
	* Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is still the
	  minimum supported) (#14261)

	libpurple:
	* Fix a potential crash in the Log Reader plugin when reading QIP logs.
	* Fix a large number of strcpy() and strcat() invocations to use
	  strlcpy() and strlcat(), etc., forestalling an entire class of
	  string buffer overrun bugs.
	  (The Electronic Frontier Foundation, Dan Auerbach, Chris Palmer,
	  Jacob Appelbaum)
	* Change some filename manipulations in filectl.c to use MAXPATHLEN
	  instead of arbitrary length constants.  (The Electronic Frontier
	  Foundation, Dan Auerbach, Chris Palmer, Jacob Appelbaum)
	* Fix endianness-related crash in NTLM authentication (Jon Goldberg)
	  (#14163)

	Gadu-Gadu:
	* Fixed searching for buddies in public directory. (Tomasz Wasilczyk)
	  (#5242)
	* Better status message handling. (Tomasz Wasilczyk) (#14314)
	* Merged two buddy blocking methods. (Tomasz Wasilczyk) (#5303)
	* Fix building of the bundled libgadu library with older versions
	  of GnuTLS. (patch plucked from upstream) (#14365)

	ICQ:
	* Fix crash selecting Tools->Set Mood when you're online with an
	  ICQ account that is configured as an AIM account. (#14437)

	IRC:
	* Fix a crash when remote users have certain characters in their
	  nicknames. (Discovered by Djego Ibanez) (#14341)
	* Fix the handling of formatting following mIRC ^O (#14436)
	* Fix crash when NAMES is empty. (James McLaughlin) (#14518)

	MSN:
	* Fix incorrect handling of HTTP 100 responses when using the HTTP
	  connection method.  This can lead to a crash. (Discovered by Marius
	  Wachtler)
	* Fix seemingly random crashing. (#14307)
	* Fix a crash when the account is disconnected at the time we are doing a
	  SB request. (Hanzz, ported by shlomif) (#12431)

	XMPP:
	* Do not generate malformed XML ("</>") when setting an empty mood.
	  (#14342)
	* Fix the /join <room> behavior.  (Broken when adding support for
	  <room>@<server>)  (#14205)

	Yahoo!/Yahoo! JAPAN:
	* Fix coming out of idle while in an unavailable state
	* Fix logging into Yahoo! JAPAN.  (#14259)

	Windows-Specific Changes:
	* Open an explorer.exe window at the location of the file when clicking
	  on a file link instead of executing the file, because executing a file
	  can be potentially dangerous.  (Discovered by James Burton of
	  Insomnia Security) (Fixed by Eion Robb)

1 files changed, 1 insertions, 3 deletions

diff --git a/chat/finch/Makefile b/chat/finch/Makefile
index 910ca562453..877cd7e8d00 100644
--- a/chat/finch/Makefile
+++ b/chat/finch/Makefile
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.32 2011/07/30 20:13:07 gls Exp $
+# $NetBSD: Makefile,v 1.33 2011/08/26 13:14:58 obache Exp $
 
 PKGNAME=	finch-${PIDGIN_VERSION}
-PKGREVISION=	1
 
 COMMENT=	Multi-protocol Instant Messaging client console frontend
 
@@ -52,6 +51,5 @@ BUILDLINK_API_DEPENDS.libpurple+=	libpurple-${PIDGIN_VERSION}{,nb*}
 .include "../../devel/glib2/buildlink3.mk"
 .include "../../devel/libidn/buildlink3.mk"
 .include "../../devel/ncursesw/buildlink3.mk"
-.include "../../devel/nspr/buildlink3.mk"
 .include "../../textproc/libxml2/buildlink3.mk"
 .include "../../mk/bsd.pkg.mk"