summaryrefslogtreecommitdiff
path: root/chat/libpurple
AgeCommit message (Collapse)AuthorFilesLines
2019-07-20*: recursive bump for nettle 3.5.1wiz1-2/+2
2019-07-13libpurple: needs -lnsl on SunOS. from wilbury.maya1-1/+2
2019-05-05Recursive rebvump from devel/nssryoon2-4/+4
2019-04-25PKGREVISION bump for anything using python without a PYPKGPREFIX.maya1-2/+2
This is a semi-manual PKGREVISION bump.
2018-11-14Revbump after cairo 1.16.0 update.kleink1-2/+2
2018-11-12Recursive revbump from hardbuzz-2.1.1ryoon1-2/+2
2018-08-22Recursive bump for perl5-5.28.0wiz1-2/+2
2018-04-19libpurple: remove files that are not needed after 2.13.0 updatewiz2-140/+0
2018-04-17Add p11-kit to gnutls/bl3.mk and bump dependencies.wiz1-1/+2
2018-04-16libpurple, pidgin, finch: update to 2.13.0wiz3-11/+8
version 2.13.0 (03/08/2018): libpurple: * Unified string comparison. (PR #186) (Arkadiy Illarionov) * Properlly shell escape URI's when opening them. (PR #271 Daniel Kamil Kozar) * Fix a one byte buffer overread in function purple_markup_linkify * Fix an issue were utf8 was incorrectly truncated which could lead to crashes as we were potentially feeding garbage into glib/gtk. libgnt: * Fixed build against curses 6.0 with opaque structs set. (#16764 dimstar) (PR #268 Daniel Kamil Kozar) * Fixed a crash when resizing the window. (#16680 marcus) (PR #269 Daniel Kamil Kozar) General: * Fixed bashism in autotools. (#16836 lameventanas) (PR #267 Daniel Kamil Kozar) XMPP: * Show XEP-0066 OOB URLs in any message, not just headlines * Fix a user after free (#17200 debarshiray) (PR #266 Ethan Blanton) * Removed pipelining from BOSH connections (#17025 PR #295 Tom Li) * Don't try to TLS already secured BOSH connections (#17270 PR #293 Tom Li) IRC: * Fix "Registration timeout" on SASL auth with InspIRCd servers (and possibly others not based on charybdis/ratbox/ircd-seven) * Fix issues with plugins that modify outgoing messages (such as the custom PART/QUIT feature of the IRC More plugin) * Fix IRC buffer handling. (#12562 PR #272 Shivaram Lingamneni) * Properly handle AUTHENTICATE as a normal command with server prefix. (PR #316 dx) * Fix a crash caused by a use after free of the MOTD. * Fix an out of bounds read in irc_nick_skip_mode. * Fix a write of a single byte before the start of a buffer in irc_parse_ctcp. Pidgin: * Better support for dark themes. (#12572 Alyssa Rosenzweig and Gary Kramlich) * Fixed IPv6 links by not escaping []'s. (#16391 cyisfor) (PR #270 Daniel Kamil Kozar) * Only write buddy icons to the cache if they're not already cached. (PR #276 David Woodhouse) * Rejoin persistent chats after reconnect. (#15687 PR #285 Christof Meerwald) * Made the WIN32 Transparency plugin work on all platforms. (#3124 PR #287 Daniel Kamil Kozar) * Ensure search results buttons are labeled (Backport from de2d88e575ee) * Fix matching unicode smilies. (#17232 gnubfx PR #262 Daniel Kamil Kozar) * Correctly update mute/unmute status when the remote side mutes/unmutes us. (#17273 PR #302 David Woodhouse) * Rework the status icon blinking to not used deprecated API. (#17174 zelch PR #264 Daniel Kamil Kozar) * Don't allow adding a buddy to protocols that don't have an add_buddy callback. (#4061 Paradox) Finch: * Fix handling of search results (#17238 David Woodhouse) Voice & Video: * Port backend-fs to newer api for farstream relay-info property (#17274 bellet)
2018-04-16Recursive bump for new fribidi dependency in pango.wiz1-2/+2
2018-03-12Recursive bumps for fontconfig and libzip dependency changes.wiz1-2/+2
2018-01-28Bump PKGREVISION for gdbm shlib major bumpwiz1-2/+2
2018-01-07Fix indentation in buildlink3.mk files.rillig1-2/+2
The actual fix as been done by "pkglint -F */*/buildlink3.mk", and was reviewed manually. There are some .include lines that still are indented with zero spaces although the surrounding .if is indented. This is existing practice.
2018-01-01Sort PLIST files.rillig1-16/+16
Unsorted entries in PLIST files have generated a pkglint warning for at least 12 years. Somewhat more recently, pkglint has learned to sort PLIST files automatically. Since pkglint 5.4.23, the sorting is only done in obvious, simple cases. These have been applied by running: pkglint -Cnone,PLIST -Wnone,plist-sort -r -F
2017-11-23recursive bump for libxkbcommon removal from at-spi2-corewiz1-2/+2
2017-06-05Recursive revbump from lang/perl5 5.26.0ryoon1-1/+2
2017-03-22Regenerate to match actual patches.joerg1-2/+2
2017-03-20Update chat/{libpurple,pidgin} to version 2.12.0khorben4-30/+8
version 2.12.0 (03/09/2017): libpurple: * Fix an out of bounds memory read in purple_markup_unescape_entity. CVE-2017-2640 * Fix use of uninitialised memory if running non-debug-enabled versions of glib * Updated AIM dev and dist ID's to new ones that were assigned by AOL. * TLS certificate verification now uses SHA-256 checksums. * Fixed SASL external auth for Freenode. * Removed the MSN protocol plugin. It has been unusable and dormant for some time. MSNP18 has been discontinued and the protocol plugin would require a large update to start working again. See: http://ismsndeadyet.com/ The third-party Pidgin SkypeWeb plugin, however, should provide enough functionality as a replacement if people still want to use MSN: https://github.com/EionRobb/skype4pidgin/tree/master/skypeweb * Removed Mxit protocol plugin. The service was closed at the end of September 2016. See https://pidgin.im/pipermail/devel/2016-September/024078.htm * Removed the MySpaceIM protocol plugin. The service has been defunct for a long time. (#15356) * Remove the Yahoo! protocol plugin. Yahoo has completely reimplemented their protocol, so this version is no longer operable as of August 5th, 2016: https://yahoo.tumblr.com/post/145715934739/q2-2016-progress-report-on-our-product A new protocol plugin has been written to support the new protocol. It can be found here: https://github.com/EionRobb/funyahoo-plusplus This also removes support for Yahoo! Japan. According to http://messenger.yahoo.co.jp/ the service ended March 26th, 2014. * Remove the Facebook (XMPP) account option. According to https://developers.facebook.com/docs/chat the XMPP Chat API service ended April 30th, 2015. A new protocol plugin has been written, using a different method, to support Facebook. It can be found at https://github.com/dequis/purple-facebook/wiki * Fixed gnutls certificate validation errors that mainly affected google (Dequis) General * Replaced instances of d.pidgin.im with developer.pidgin.im and updated the urls to use https. (#17036) IRC * Fixed issue of messages being silently cut off at 500 characters. Large messages are now split into parts and sent one by one. (#4753)
2017-03-11Reset PKGREVISION after update.wiz1-2/+1
2017-03-11Update chat/{libpurple,pidgin} to version 2.11.0khorben4-38/+12
version 2.11.0 (06/21/2016): General: * 2.10.12 was accidentally released with new additions to the API and should have been released as 2.11.0. Unfortunately, we did not catch the mistake until after 2.10.12 was released, but we're fixing it now. See ChangeLog.API for more information. * Include the Mozilla certificate bundle. This fixes connecting to servers with certificates from Let's Encrypt. * Remove all 1024-bit CAs libpurple: * media: fix an issue with ximagesink displaying only a corner cut-out of a larger webcam video (Jakub Adam) * mediamanager: update output window destruction so that it reflects recent changes in the media pipeline structure (Jakub Adam) * Ported Instantbird's CommandUiOps to libpurple (Dequis) Pidgin: * Fixed #14962 * Fixed alignment of incoming right-to-left messages in protocols that don't support rich text * Fix a potential crash while exiting pidgin Windows-Specific Changes: * Use getaddrinfo for DNS to enable IPv6 (#1075) * Updates to dependencies: * NSS 3.24 and NSPR 4.12. AIM: * Add support for the newer kerberos-based authentication of AIM 8.x Bonjour * Fixed building on Mac OSX (Patrick Cloke) (#16883) ICQ: * Stop truncating passwords to 8 characters like old ICQ clients did. (#16692). If you actually needed this, truncate your password manually by pressing backspace a few times. IRC: * Base64-decode SASL messages before passing to libsasl (#16268) MXit * Fixed a buffer overflow. Discovered by Yves Younan of Cisco Talos. (TALOS-CAN-0120) * Fixed a remote out-of-bounds read. Discovered by Yves Younan of Cisco Talos. (TALOS-CAN-0140) * Fixed a remote out-of-band read. Discovered by Yves Younan of Cisco Talos. (TALOS-CAN-0138, TALOS-CAN-0135) * Fixed an invalid read. Discovered by Yves Younan of Cisco Talos (TALOS-CAN-0118) * Fixed a remote buffer overflow vulnerability. Discovered by Yves Younan of Cisco Talos. (TALOS-CAN-0119) * Fixed an out-of-bounds read discovered by Yves Younan of Cisco Talos. (TALOS-CAN-0123) * Fixed a directory traversal issue. Discovered by Yves Younan of Cisco Talos (TALOS-CAN-0128) * Fixed a remote denial of service vulnerability that could result in a null pointer dereference. Discovered by Yves Younan of Cisco Talos. (TALOS-CAN-0133) * Fixed a remote denial of service that could result in an out-of-bounds read. Discovered by Yves Younan of Cisco Talos (TALOS-CAN-0134) * Fixed multiple remote buffer overflows. Discovered by Yves Younan of Cisco Talos. (TALOS-CAN-0136) * Fixed a remote NULL pointer dereference. Discovered by Yves Younan of Cisco Talos (TALOS-CAN-0137) * Fixed a remote code execution issue discovered by Yves Younan of Cisco Talos. (TALOS-CAN-0142) * Fixed a remote denial of service vulnerability in contact mood handling. Discovered by Yves Younan of Cisco Talos (TALOS-CAN-0141) * Fixed a remote out-of-bounds write vulnerability. Discovered by Yves Younan of Cisco Talos. (TALOS-CAN-0139) * Fix a remote out-of-bounds read. Discovered by Yves Younan of Cisco Talos. (TALOS-CAN-0143)
2017-02-12Recursive revbump from fonts/harfbuzzryoon1-2/+2
2017-02-06Recursive bump for harfbuzz's new graphite2 dependency.wiz1-2/+2
2016-09-19Recursive PKGREVISION bump for gnutls shlib major bump.wiz1-2/+2
2016-08-03Revbump after graphics/gd updateadam1-2/+2
2016-07-09Bump PKGREVISION for perl-5.24.0 for everything mentioning perl.wiz1-2/+2
2016-07-06Add upstream bug report URL.wiz2-3/+4
2016-07-06Fix conflict with NetBSD's hmac(3) function.wiz2-1/+40
Makes this build again on NetBSD-7.99.33.
2016-06-08Bump PKGREVISION for perl-5.24.wiz1-2/+2
2016-03-05Bump PKGREVISION for security/openssl ABI bump.jperkin1-1/+2
2016-01-17libpurple leaks many more other libraries nowadays, add them to the bl3.mk.wiz1-1/+6
2016-01-13Update pidgin/finch/libpurple to 2.10.12.wiz8-33/+142
gstreamer is not an option any longer. version 2.10.12 (MM/DD/YY): Windows-Specific Changes: * Updates to dependencies: * Cyrus SASL 2.1.26 * libxml2 2.9.2 * NSS 3.17.3 and NSPR 4.10.7 * Perl 5.20.1 * SILC 1.1.12 * Remove support for Tcl plugins Gadu-Gadu: * Updated internal libgadu to version 1.12.1.
2015-12-29Whitespace.dholland1-3/+3
2015-11-03Add SHA512 digests for distfiles for chat categoryagc1-1/+2
Problems found with existing distfiles: distfiles/icb-5.0.9.tar.gz distfiles/icb.2.1.4.tar.Z distfiles/zenicb-19981202.tar.gz No changes made to these /distinfo files. Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
2015-08-23Bump PKGREVISION for nettle shlib major bump.wiz1-2/+2
2015-06-17Fix build with the "gnome" option disabledkhorben1-1/+2
Without this patch the configure script might find gconftool-2(1) installed on the system, and then create and install a schema anyway - and in the wrong location. "please commit" dholland@
2015-06-12Recursive PKGREVISION bump for all packages mentioning 'perl',wiz1-2/+2
having a PKGNAME of p5-*, or depending such a package, for perl-5.22.0.
2015-04-25Recursive revbump following MesaLib update, categories a through f.tnn1-1/+2
2014-12-27Add CPPFLAGS/CFLAGS.SunOS per followup to PR 49343.dholland1-1/+4
2014-12-07Update pidgin to 2.10.11.obache7-40/+44
version 2.10.11 (11/23/14): General: * Fix handling of Self-Signed SSL/TLS Certificates when using the NSS plugin (#16412) * Improve default cipher suites used with the NSS plugin (#16262) * Add NSS Preferences plugin which allows the SSL/TLS Versions and cipher suites to be configured (#8061) Gadu-Gadu: * Fix a bug that prevented plugin to load when compiled without GnuTLS. (mancha) (#16431) * Fix build for platforms without AF_LOCAL definition. (#16404) MSN: * Fix broken login due to server change (dx, TReKiE). (#16451, #16455) * Fail early when buddy list is unavailable instead of wasting bandwidth endlessly re-trying. version 2.10.10 (10/22/14): General: * Check the basic constraints extension when validating SSL/TLS certificates. This fixes a security hole that allowed a malicious man-in-the-middle to impersonate an IM server or any other https endpoint. This affected both the NSS and GnuTLS plugins. (Discovered by an anonymous person and Jacob Appelbaum of the Tor Project, with thanks to Moxie Marlinspike for first publishing about this type of vulnerability. Thanks to Kai Engert for guidance and for some of the NSS changes) (CVE-2014-3694) * Allow and prefer TLS 1.2 and 1.1 when using the NSS plugin for SSL. (Elrond and Ashish Gupta) (#15909) libpurple3 compatibility: * Encrypted account passwords are preserved until the new one is set. * Fix loading Google Talk and Facebook XMPP accounts. Windows-Specific Changes: * Don't allow overwriting arbitrary files on the file system when the user installs a smiley theme via drag-and-drop. (Discovered by Yves Younan of Cisco Talos) (CVE-2014-3697) * Updates to dependencies: * NSS 3.17.1 and NSPR 4.10.7 Finch: * Fix build against Python 3. (Ed Catmur) (#15969) Gadu-Gadu: * Updated internal libgadu to version 1.12.0. Groupwise: * Fix potential remote crash parsing server message that indicates that a large amount of memory should be allocated. (Discovered by Yves Younan and Richard Johnson of Cisco Talos) (CVE-2014-3696) IRC: * Fix a possible leak of unencrypted data when using /me command with OTR. (Thijs Alkemade) (#15750) MXit: * Fix potential remote crash parsing a malformed emoticon response. (Discovered by Yves Younan and Richard Johnson of Cisco Talos) (CVE-2014-3695) XMPP: * Fix potential information leak where a malicious XMPP server and possibly even a malicious remote user could create a carefully crafted XMPP message that causes libpurple to send an XMPP message containing arbitrary memory. (Discovered and fixed by Thijs Alkemade and Paul Aurich) (CVE-2014-3698) * Fix Facebook XMPP roster quirks. (#15041, #15957) Yahoo: * Fix login when using the GnuTLS library for TLS connections. (#16172)
2014-12-07Use packlist for most of perl related PLIST.obache2-8/+5
Resolve PR pkg/49343.
2014-05-29Bump for perl-5.20.0.wiz1-2/+2
Do it for all packages that * mention perl, or * have a directory name starting with p5-*, or * depend on a package starting with p5- like last time, for 5.18, where this didn't lead to complaints. Let me know if you have any this time.
2014-05-09Mark packages that are not ready for python-3.3 also not ready for 3.4,wiz1-2/+2
until proven otherwise.
2014-05-05Recursive revbump from x11/pixmanryoon1-2/+2
Fix PR pkg/48777
2014-04-23Disable gnutls as a preferred option, as using gnutls keeps libpurpleschnoebe1-2/+2
from being able to log into Yahoo Messenger.
2014-02-12Recursive PKGREVISION bump for OpenSSL API version bump.tron1-1/+2
2014-02-04Update pidgin to 2.10.9.obache2-6/+6
version 2.10.9 (2/2/2014): XMPP: * Fix problems logging into some servers including jabber.org and chat.facebook.com. (#15879)
2014-02-04Mark as not ready for python-3.x.obache1-1/+2
Fixes reversed condition change at the previous commit. Build may fine with python-3.x, but installed scripts are incompatible.
2014-02-03Mark as not ready for python-3.x.wiz1-2/+1
finch does not compile with python-3.3. Since libpurple is not versioned and finch pulls it in, we have to mark libpurple too, and then pidgin because of libpurple. It's all one codebase anyway...
2014-01-31Update pidin to 2.10.8.obache4-13/+11
version 2.10.8 (1/28/2014): General: * Python build scripts and example plugins are now compatible with Python 3. (Ashish Gupta) (#15624) libpurple: * Fix potential crash if libpurple gets an error attempting to read a reply from a STUN server. (Discovered by Coverity static analysis) (CVE-2013-6484) * Fix potential crash parsing a malformed HTTP response. (Discovered by Jacob Appelbaum of the Tor Project) (CVE-2013-6479) * Fix buffer overflow when parsing a malformed HTTP response with chunked Transfer-Encoding. (Discovered by Matt Jones, Volvent) (CVE-2013-6485) * Better handling of HTTP proxy responses with negative Content-Lengths. (Discovered by Matt Jones, Volvent) * Fix handling of SSL certificates without subjects when using libnss. * Fix handling of SSL certificates with timestamps in the distant future when using libnss. (#15586) * Impose maximum download size for all HTTP fetches. Pidgin: * Fix crash displaying tooltip of long URLs. (CVE-2013-6478) * Better handling of URLs longer than 1000 letters. * Fix handling of multibyte UTF-8 characters in smiley themes. (#15756) Windows-Specific Changes: * When clicking file:// links, show the file in Explorer rather than attempting to run the file. This reduces the chances of a user clicking on a link and mistakenly running a malicious file. (Originally discovered by James Burton, Insomnia Security. Rediscovered by Yves Younan of Sourcefire VRT.) (CVE-2013-6486) * Fix Tcl scripts. (#15520) * Fix crash-on-startup when ASLR is always on. (#15521) * Updates to dependencies: * NSS 3.15.4 and NSPR 4.10.2 * Pango 1.29.4-1daa Patched for https://bugzilla.gnome.org/show_bug.cgi?id=668154 AIM: * Fix untrusted certificate error. AIM and ICQ: * Fix a possible crash when receiving a malformed message in a Direct IM session. Gadu-Gadu: * Fix buffer overflow with remote code execution potential. Only triggerable by a Gadu-Gadu server or a man-in-the-middle. (Discovered by Yves Younan and Ryan Pentney of Sourcefire VRT) (CVE-2013-6487) * Disabled buddy list import/export from/to server (it didn't work anymore). Buddy list synchronization will be implemented in 3.0.0. * Disabled new account registration and password change options, as it didn't work either. Account registration also caused a crash. Both functions are available using official Gadu-Gadu website. IRC: * Fix bug where a malicious server or man-in-the-middle could trigger a crash by not sending enough arguments with various messages. (Discovered by Daniel Atallah) (CVE-2014-0020) * Fix bug where initial IRC status would not be set correctly. * Fix bug where IRC wasn't available when libpurple was compiled with Cyrus SASL support. (#15517) MSN: * Fix NULL pointer dereference parsing headers in MSN. (Discovered by Fabian Yamaguchi and Christian Wressnegger of the University of Goettingen) (CVE-2013-6482) * Fix NULL pointer dereference parsing OIM data in MSN. (Discovered by Fabian Yamaguchi and Christian Wressnegger of the University of Goettingen) (CVE-2013-6482) * Fix NULL pointer dereference parsing SOAP data in MSN. (Discovered by Fabian Yamaguchi and Christian Wressnegger of the University of Goettingen) (CVE-2013-6482) * Fix possible crash when sending very long messages. Not remotely-triggerable. (Discovered by Matt Jones, Volvent) MXit: * Fix buffer overflow with remote code execution potential. (Discovered by Yves Younan and Pawel Janic of Sourcefire VRT) (CVE-2013-6487) * Fix sporadic crashes that can happen after user is disconnected. * Fix crash when attempting to add a contact via search results. * Show error message if file transfer fails. * Fix compiling with InstantBird. * Fix display of some custom emoticons. SILC: * Correctly set whiteboard dimensions in whiteboard sessions. SIMPLE: * Fix buffer overflow with remote code execution potential. (Discovered by Yves Younan of Sourcefire VRT) (CVE-2013-6487) XMPP: * Prevent spoofing of iq replies by verifying that the 'from' address matches the 'to' address of the iq request. (Discovered by Fabian Yamaguchi and Christian Wressnegger of the University of Goettingen) (CVE-2013-6483) * Fix crash on some systems when receiving fake delay timestamps with extreme values. (Discovered by Jaime Breva Ribes) (CVE-2013-6477) * Fix possible crash or other erratic behavior when selecting a very small file for your own buddy icon. * Fix crash if the user tries to initiate a voice/video session with a resourceless JID. * Fix login errors when the first two available auth mechanisms fail but a subsequent mechanism would otherwise work when using Cyrus SASL. (#15524) * Fix dropping incoming stanzas on BOSH connections when we receive multiple HTTP responses at once. (Issa Gorissen) (#15684) Yahoo!: * Fix possible crashes handling incoming strings that are not UTF-8. (Discovered by Thijs Alkemade and Robert Vehse) (CVE-2012-6152) * Fix a bug reading a peer to peer message where a remote user could trigger a crash. (CVE-2013-6481) Plugins: * Fix crash in contact availability plugin. * Fix perl function Purple::Network::ip_atoi * Add Unity integration plugin.
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-17 03:43:10 +0000