summaryrefslogtreecommitdiff
path: root/chat
AgeCommit message (Collapse)AuthorFilesLines
2014-02-12Recursive PKGREVISION bump for OpenSSL API version bump.tron43-81/+86
2014-02-04Update pidgin to 2.10.9.obache2-6/+6
version 2.10.9 (2/2/2014): XMPP: * Fix problems logging into some servers including jabber.org and chat.facebook.com. (#15879)
2014-02-04Mark as not ready for python-3.x.obache1-1/+2
Fixes reversed condition change at the previous commit. Build may fine with python-3.x, but installed scripts are incompatible.
2014-02-04Build with TCL 8.6.joerg1-8/+10
2014-02-03Mark as not ready for python-3.x.wiz3-4/+9
finch does not compile with python-3.3. Since libpurple is not versioned and finch pulls it in, we have to mark libpurple too, and then pidgin because of libpurple. It's all one codebase anyway...
2014-01-31Update pidin to 2.10.8.obache8-25/+15
version 2.10.8 (1/28/2014): General: * Python build scripts and example plugins are now compatible with Python 3. (Ashish Gupta) (#15624) libpurple: * Fix potential crash if libpurple gets an error attempting to read a reply from a STUN server. (Discovered by Coverity static analysis) (CVE-2013-6484) * Fix potential crash parsing a malformed HTTP response. (Discovered by Jacob Appelbaum of the Tor Project) (CVE-2013-6479) * Fix buffer overflow when parsing a malformed HTTP response with chunked Transfer-Encoding. (Discovered by Matt Jones, Volvent) (CVE-2013-6485) * Better handling of HTTP proxy responses with negative Content-Lengths. (Discovered by Matt Jones, Volvent) * Fix handling of SSL certificates without subjects when using libnss. * Fix handling of SSL certificates with timestamps in the distant future when using libnss. (#15586) * Impose maximum download size for all HTTP fetches. Pidgin: * Fix crash displaying tooltip of long URLs. (CVE-2013-6478) * Better handling of URLs longer than 1000 letters. * Fix handling of multibyte UTF-8 characters in smiley themes. (#15756) Windows-Specific Changes: * When clicking file:// links, show the file in Explorer rather than attempting to run the file. This reduces the chances of a user clicking on a link and mistakenly running a malicious file. (Originally discovered by James Burton, Insomnia Security. Rediscovered by Yves Younan of Sourcefire VRT.) (CVE-2013-6486) * Fix Tcl scripts. (#15520) * Fix crash-on-startup when ASLR is always on. (#15521) * Updates to dependencies: * NSS 3.15.4 and NSPR 4.10.2 * Pango 1.29.4-1daa Patched for https://bugzilla.gnome.org/show_bug.cgi?id=668154 AIM: * Fix untrusted certificate error. AIM and ICQ: * Fix a possible crash when receiving a malformed message in a Direct IM session. Gadu-Gadu: * Fix buffer overflow with remote code execution potential. Only triggerable by a Gadu-Gadu server or a man-in-the-middle. (Discovered by Yves Younan and Ryan Pentney of Sourcefire VRT) (CVE-2013-6487) * Disabled buddy list import/export from/to server (it didn't work anymore). Buddy list synchronization will be implemented in 3.0.0. * Disabled new account registration and password change options, as it didn't work either. Account registration also caused a crash. Both functions are available using official Gadu-Gadu website. IRC: * Fix bug where a malicious server or man-in-the-middle could trigger a crash by not sending enough arguments with various messages. (Discovered by Daniel Atallah) (CVE-2014-0020) * Fix bug where initial IRC status would not be set correctly. * Fix bug where IRC wasn't available when libpurple was compiled with Cyrus SASL support. (#15517) MSN: * Fix NULL pointer dereference parsing headers in MSN. (Discovered by Fabian Yamaguchi and Christian Wressnegger of the University of Goettingen) (CVE-2013-6482) * Fix NULL pointer dereference parsing OIM data in MSN. (Discovered by Fabian Yamaguchi and Christian Wressnegger of the University of Goettingen) (CVE-2013-6482) * Fix NULL pointer dereference parsing SOAP data in MSN. (Discovered by Fabian Yamaguchi and Christian Wressnegger of the University of Goettingen) (CVE-2013-6482) * Fix possible crash when sending very long messages. Not remotely-triggerable. (Discovered by Matt Jones, Volvent) MXit: * Fix buffer overflow with remote code execution potential. (Discovered by Yves Younan and Pawel Janic of Sourcefire VRT) (CVE-2013-6487) * Fix sporadic crashes that can happen after user is disconnected. * Fix crash when attempting to add a contact via search results. * Show error message if file transfer fails. * Fix compiling with InstantBird. * Fix display of some custom emoticons. SILC: * Correctly set whiteboard dimensions in whiteboard sessions. SIMPLE: * Fix buffer overflow with remote code execution potential. (Discovered by Yves Younan of Sourcefire VRT) (CVE-2013-6487) XMPP: * Prevent spoofing of iq replies by verifying that the 'from' address matches the 'to' address of the iq request. (Discovered by Fabian Yamaguchi and Christian Wressnegger of the University of Goettingen) (CVE-2013-6483) * Fix crash on some systems when receiving fake delay timestamps with extreme values. (Discovered by Jaime Breva Ribes) (CVE-2013-6477) * Fix possible crash or other erratic behavior when selecting a very small file for your own buddy icon. * Fix crash if the user tries to initiate a voice/video session with a resourceless JID. * Fix login errors when the first two available auth mechanisms fail but a subsequent mechanism would otherwise work when using Cyrus SASL. (#15524) * Fix dropping incoming stanzas on BOSH connections when we receive multiple HTTP responses at once. (Issa Gorissen) (#15684) Yahoo!: * Fix possible crashes handling incoming strings that are not UTF-8. (Discovered by Thijs Alkemade and Robert Vehse) (CVE-2012-6152) * Fix a bug reading a peer to peer message where a remote user could trigger a crash. (CVE-2013-6481) Plugins: * Fix crash in contact availability plugin. * Fix perl function Purple::Network::ip_atoi * Add Unity integration plugin.
2014-01-30Mark as not yet ready for python-3.x.wiz2-2/+6
2014-01-25Mark packages as not ready for python-3.x where applicable;wiz13-21/+33
either because they themselves are not ready or because a dependency isn't. This is annotated by PYTHON_VERSIONS_INCOMPATIBLE= 33 # not yet ported as of x.y.z or PYTHON_VERSIONS_INCOMPATIBLE= 33 # py-foo, py-bar respectively, please use the same style for other packages, and check during updates. Use versioned_dependencies.mk where applicable. Use REPLACE_PYTHON instead of handcoded alternatives, where applicable. Reorder Makefile sections into standard order, where applicable. Remove PYTHON_VERSIONS_INCLUDE_3X lines since that will be default with the next commit. Whitespace cleanups and other nits corrected, where necessary.
2014-01-17Convert to versioned_dependencies.mk (for dns)wiz1-3/+3
2014-01-11Revbump after updating tcl/tk.adam7-14/+14
2014-01-10+ mcabber.wiz1-1/+2
2014-01-10Import mcabber-0.10.2 as chat/mcabber, packaged for wip by kh-p,wiz9-0/+1277
zul_, khorben, netcap, and jihbed. mcabber is a small Jabber console client, it supports SSL, OTR, MUC, history logging, commands completion and external actions triggers.
2014-01-06Don't use -Wno-traditional, clang doesn't have it.joerg4-13/+29
2014-01-02update ircii to 20131230. changes include:mrg4-53/+20
o re-add the utf-8 changes now that the scrolling is not slowed o scrolling is much faster now o fix compile time errors in on modern glibc systems o add /nuser command o wserv and ircio move into "libexec" dir.
2014-01-01Distfile changed upstream. (HI CHRISTOS.)dholland5-37/+18
Changes were mostly whitespace. PKGREVISION -> 1..
2014-01-01Recursive PKGREVISION bump for libgcrypt-1.6.0 shlib major bump.wiz20-37/+40
2013-12-24Explicitely enable XFT support unless GTK+ was compiled without X11 supporttron1-5/+8
under Mac OS X. This fixes the text output under Mac OS X if GTK+ was actually compiled with X11 support.
2013-12-16+phonedholland1-1/+2
2013-12-16Add chat/phone, which is like VMS phone, written by Jonathan C. Broomedholland8-0/+159
in 1985 and fixed up by Christos "last week". (I've apparently been sitting on this package since 20130101, so it was a year ago...) XXX: this should probably grow an rc script for the master daemon, phoned.
2013-12-15Don't panic about unused functions.joerg1-2/+4
2013-12-15Update to 2.44wen2-7/+6
Upstream changes: ----------------------------------------- version 2.44 at 2013-06-10 13:21:56 +0000 ----------------------------------------- Change: ae253101da7958777a572271f901e894ae20de05 Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk> Date : 2013-06-10 14:21:56 +0000 Convert the distribution to dzil Change: 2f3bfa5c4a97ca061c2f87d4f4706e0bb0376f43 Author: Chris Williams <chris@bingosnet.co.uk> Date : 2013-06-10 06:08:52 +0000 Merge pull request #1 from avenj/messagetags IRCv3.2 message tag support, tests for same. Change: 31a1c9aeab4120e626af130d73b0f1a58a77d46e Author: Jon Portnoy <avenj@cobaltirc.org> Date : 2013-06-07 13:03:16 +0000 Add IRCv3.2 message tag support, tests for same.
2013-12-15Update to 6.83wen2-10/+9
Update DEPENDS Upstream changes: 6.83 Mon May 27 10:40:09 BST 2013 - NickServID: React on IRC Message 433 - Commit: ec7cd33736 - BotCommand: Support for overriding the Command Handler - BotCommand: Added Support for a Help Modification Callback - BotCommand: Adapted the Help Callback Options so it gets the Command and Arguments - BotCommand: Added Support for Command Aliases - BotCommand: Allowed No Arguments/Only Variable Arguments - Implemented SSL Client Cert Support 6.82 Sat Mar 9 22:15:02 GMT 2013 - Add the Prefix to the "Syntax:" line of the command help 6.81 Fri Nov 23 15:53:11 GMT 2012 - Resolve hash randomisation issues with v5.17.6 6.80 Thu Sep 20 09:52:59 BST 2012 - Add missing prereq 6.79 Wed Sep 19 14:24:03 BST 2012 - Argument naming and argument count validation in Plugin::BotCommand - [rt.cpan.org #79745] nick_long_form dies due to a race condition
2013-12-13Correct PLIST.schnoebe1-2/+2
2013-12-12Remove "FETCH_USING=curl".schnoebe1-2/+1
2013-12-12Update to jabberd 2.3.1schnoebe7-50/+18
* 2.3.0 to 2.3.1 upgrade: What changed: - Marked "TLS-Everywhere" as EXPERIMENTAL feature - default EXPERIMENTAL to 'no' - default SUPERSEDED to 'no' - moved STANZA-ACK and MY-IP-ADDRESS XEPs and IQ-PRIVATE push out of experimental status * 2.2.17 to 2.3.0 upgrade: What changed: - Renamed non-standard UPGRADE file overwriting outdated NEWS file - Semantic Versioning: http://semver.org/ - TLS Everywhere: https://github.com/stpeter/manifesto - Required GSASL >=1.1 - jabberd should compile without warnings - out-of-source builds should work - pgsql: authreg password_type support - pgsql: schema support - ldapvcard: groupattr works even if no groupattr_regex defined - ldapfull: checks for ldap group membership on login - vCard: Assume tel phone is voice phone - MySQL: default password hashing algorithm changed to SHA512 - out-conn-reuse s2s.xml option naming unified - XML parse error will log buffer details - CRAM-MD5 auth support - router private key cachain and password support - hashed passwords support in SQLite3 storage
2013-12-12Various patches to fix build on SunOS.jperkin7-3/+85
2013-12-09Fix/Update DEPENDS paterns for perl CORE modules, with some trivial fixes.obache1-3/+3
Bump PKGREVISION for runtime dependency pattern changed packages.
2013-12-06Fix for later gcc against platforms without stpcpy().seanb2-1/+20
2013-11-28Update PLIST and bump PKGREVISION; seen in a chrooted pbulk run so I'mdholland2-3/+12
going to assume it changed with the new(ish) Erlang.
2013-11-27Also package include/xchat/xchat-plugin.h to allow third-party packages tokhorben3-5/+22
build plug-ins for xchat. ok tron@
2013-11-20Revbump after updating devel/boost-libsadam1-2/+2
2013-11-20recursive bump from boost-lib shlib major bump.obache1-2/+2
2013-11-05The last forgotten dependency of kgb-bot was on the client side, and ittonnerre1-7/+8
was IPC::Run.
2013-11-05Fix the dependencies of the kgb-bot package and add an init script. Bumptonnerre3-3/+35
pkg_revision.
2013-11-01Update HOMEPAGE.wiz1-2/+2
2013-10-30Bump PKGREVISION of packages whose Lua depends changed form, but whosedholland1-1/+2
own PKGNAME is unchanged.
2013-10-30Update Lua module depends for multiversion environment; use REPLACE_LUA.dholland1-9/+8
2013-10-27Don't use -fno-regmove.joerg3-1/+27
2013-10-20Add the KGB bot to the chat Makefile.tonnerre1-1/+2
2013-10-20Add the KGB IRC bot, version 1.31, to pkgsrc.tonnerre4-0/+90
KGB is a system that provides notifications on IRC for commits made to Git, Subversion and CVS repositories. It uses two components: a server, which runs the IRC bot, and a client, which is hooked into the repositories and sends the notifications to the server.
2013-10-19Revbump after updating textproc/icuadam10-20/+20
2013-10-16tirc requires termcap, not ncursesroy1-3/+3
2013-10-15naim can use system cursesroy1-3/+4
2013-10-15Allow any curses to work with licq-gui-consoleroy1-2/+3
2013-10-15gtmess should work with any cursesroy1-4/+4
2013-10-15BitchX uses terminfo, not cursesroy1-3/+3
2013-10-11Update ejabberd to 13.10.fhajny9-302/+252
Major changes since 2.1.13: * Huge improvements regarding performances * Optimized memory consumption * Clean code representation of xmlel records Release notes (yet?) unavailable, changelog points at bug tracker: https://support.process-one.net/secure/IssueNavigator.jspa?reset=true&jqlQuery=project+%3D+EJAB+AND+fixVersion+%3D+%22ejabberd+13.10%22
2013-10-11silc-client has an internal copy of irssi.roy1-14/+5
Newer irssi prefers termcap/terminfo over curses, so drop the curses dependency entirely.
2013-10-10Recursive revbump from pango-1.36.0ryoon17-34/+34
2013-10-09recursive bump for libmng-2.0.2 shlib major bump and dependency changewiz8-16/+16