Update pidgin to 2.10.11.

version 2.10.11 (11/23/14):
	General:
	* Fix handling of Self-Signed SSL/TLS Certificates when using the NSS
	  plugin (#16412)
	* Improve default cipher suites used with the NSS plugin (#16262)
	* Add NSS Preferences plugin which allows the SSL/TLS Versions and
	  cipher suites to be configured (#8061)

	Gadu-Gadu:
	* Fix a bug that prevented plugin to load when compiled without GnuTLS.
	  (mancha) (#16431)
	* Fix build for platforms without AF_LOCAL definition. (#16404)

	MSN:
	* Fix broken login due to server change (dx, TReKiE). (#16451, #16455)
	* Fail early when buddy list is unavailable instead of wasting bandwidth
	  endlessly re-trying.

version 2.10.10 (10/22/14):
	General:
	* Check the basic constraints extension when validating SSL/TLS
	  certificates. This fixes a security hole that allowed a malicious
	  man-in-the-middle to impersonate an IM server or any other https
	  endpoint. This affected both the NSS and GnuTLS plugins. (Discovered
	  by an anonymous person and Jacob Appelbaum of the Tor Project, with
	  thanks to Moxie Marlinspike for first publishing about this type of
	  vulnerability. Thanks to Kai Engert for guidance and for some of the
	  NSS changes) (CVE-2014-3694)
	* Allow and prefer TLS 1.2 and 1.1 when using the NSS plugin for SSL.
	  (Elrond and Ashish Gupta) (#15909)

	libpurple3 compatibility:
	* Encrypted account passwords are preserved until the new one is set.
	* Fix loading Google Talk and Facebook XMPP accounts.

	Windows-Specific Changes:
	* Don't allow overwriting arbitrary files on the file system when the
	  user installs a smiley theme via drag-and-drop. (Discovered by Yves
	  Younan of Cisco Talos) (CVE-2014-3697)
	* Updates to dependencies:
		* NSS 3.17.1 and NSPR 4.10.7

	Finch:
	* Fix build against Python 3. (Ed Catmur) (#15969)

	Gadu-Gadu:
	* Updated internal libgadu to version 1.12.0.

	Groupwise:
	* Fix potential remote crash parsing server message that indicates that
	  a large amount of memory should be allocated. (Discovered by Yves Younan
	  and Richard Johnson of Cisco Talos) (CVE-2014-3696)

	IRC:
	* Fix a possible leak of unencrypted data when using /me command
	  with OTR. (Thijs Alkemade) (#15750)

	MXit:
	* Fix potential remote crash parsing a malformed emoticon response.
	  (Discovered by Yves Younan and Richard Johnson of Cisco Talos)
	  (CVE-2014-3695)

	XMPP:
	* Fix potential information leak where a malicious XMPP server and
	  possibly even a malicious remote user could create a carefully crafted
	  XMPP message that causes libpurple to send an XMPP message containing
	  arbitrary memory. (Discovered and fixed by Thijs Alkemade and Paul
	  Aurich) (CVE-2014-3698)
	* Fix Facebook XMPP roster quirks. (#15041, #15957)

	Yahoo:
	* Fix login when using the GnuTLS library for TLS connections. (#16172)

2 files changed, 18 insertions, 14 deletions

diff --git a/chat/libpurple/patches/patch-libpurple_protocols_gg_lib_libgadu.h b/chat/libpurple/patches/patch-libpurple_protocols_gg_lib_libgadu.h
deleted file mode 100644
index 3d384197406..00000000000
--- a/chat/libpurple/patches/patch-libpurple_protocols_gg_lib_libgadu.h
+++ /dev/null
@@ -1,14 +0,0 @@
-$NetBSD: patch-libpurple_protocols_gg_lib_libgadu.h,v 1.1 2012/03/09 11:45:01 fhajny Exp $
-
-Make the SunOS condition a little more generic.
---- libpurple/protocols/gg/lib/libgadu.h.orig	2011-03-11 02:20:27.000000000 +0000
-+++ libpurple/protocols/gg/lib/libgadu.h
-@@ -117,7 +117,7 @@ typedef unsigned char   uint8_t;
- typedef unsigned short uint16_t;
- typedef unsigned int   uint32_t;
- 
--#if !defined(__CYGWIN__) && !defined(__SunOS) && !defined(_INCLUDE_HPUX_SOURCE)
-+#if !defined(__CYGWIN__) && !defined(__sun) && !defined(_INCLUDE_HPUX_SOURCE)
- #define __int8_t_defined
- typedef   signed char    int8_t;
- typedef   signed short  int16_t;
diff --git a/chat/libpurple/patches/patch-libpurple_protocols_mxit_profile.c b/chat/libpurple/patches/patch-libpurple_protocols_mxit_profile.c
new file mode 100644
index 00000000000..dcfbf911ec3
--- /dev/null
+++ b/chat/libpurple/patches/patch-libpurple_protocols_mxit_profile.c
@@ -0,0 +1,18 @@
+$NetBSD: patch-libpurple_protocols_mxit_profile.c,v 1.1 2014/12/07 08:45:59 obache Exp $
+
+* prevent to overwrite _XOPEN_SOURCE setting, and 500 is good enough for
+  localtime_r(3).
+
+--- libpurple/protocols/mxit/profile.c.orig	2014-11-23 16:41:26.000000000 +0000
++++ libpurple/protocols/mxit/profile.c
+@@ -23,7 +23,9 @@
+  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02111-1301  USA
+  */
+ 
+-#define		_XOPEN_SOURCE
++#ifndef		_XOPEN_SOURCE
++#define		_XOPEN_SOURCE 500
++#endif
+ #include	<time.h>
+ 
+ #include	"internal.h"