Accepting request 155773 from GNOME:Apps

Fixed issues (forwarded request 155541 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/155773
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pidgin?expand=0&rev=95

pidgin-2.10.6.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3e25a633b97cbfa8326999a30282e7a662a9b9bbf2853be84af0b8fb60392c96
-size 10007092

pidgin-2.10.7.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:eba32994eca20d1cf24a4261b059b2de71a1ec2dd0926e904074b0db49f7f192
+size 10069279

pidgin.changes

@@ -1,3 +1,99 @@
+-------------------------------------------------------------------
+Fri Feb 15 09:26:24 UTC 2013 - christoph.miebach@web.de
+
+- Update to version 2.10.7:
+  + Alien hatchery:
+    - No changes
+  + General:
+    - The configure script will now exit with status 1 when
+      specifying invalid protocol plugins using the
+      --with-static-prpls and --with-dynamic-prpls arguments.
+     (pidgin.im#15316)
+  + libpurple:
+    - Fix a crash when receiving UPnP responses with abnormally
+      long values. (CVE-2013-0274)
+    - Don't link directly to libgcrypt when building with GnuTLS
+      support. (pidgin.im#15329)
+    - Fix UPnP mappings on routers that return empty <URLBase/>
+      elements in their response. (pidgin.im#15373)
+    - Tcl plugin uses saner, race-free plugin loading.
+    - Fix the Tcl signals-test plugin for savedstatus-changed.
+      (pidgin.im#15443)
+  + Pidgin:
+    - Make Pidgin more friendly to non-X11 GTK+, such as
+      MacPorts' +no_x11 variant.
+  + Gadu-Gadu:
+    - Fix a crash at startup with large contact list. Avatar
+      support for buddies will be disabled until 3.0.0.
+      (pidgin.im#15226, pidgin.im#14305)
+  + IRC:
+    - Support for SASL authentication. (pidgin.im#13270)
+    - Print topic setter information at channel join.
+      (pidgin.im#13317)
+  + MSN:
+    - Fix SSL certificate issue when signing into MSN for some
+      users.
+    - Fix a crash when removing a user before its icon is loaded.
+      (pidgin.im#15217)
+  + MXit:
+    - Fix a bug where a remote MXit user could possibly specify a
+      local file path to be written to. (CVE-2013-0271)
+    - Fix a bug where the MXit server or a man-in-the-middle could
+      potentially send specially crafted data that could overflow
+      a buffer and lead to a crash or remote code execution.
+      (CVE-2013-0272)
+    - Display farewell messages in a different colour to
+      distinguish them from normal messages.
+    - Add support for typing notification.
+    - Add support for the Relationship Status profile attribute.
+    - Remove all reference to Hidden Number.
+    - Ignore new invites to join a GroupChat if you're already
+      joined, or still have a pending invite.
+    - The buddy's name was not centered vertically in the 
+      buddy-list if they did not have a status-message or mood
+      set.
+    - Fix decoding of font-size changes in the markup of received
+      messages.
+    - Increase the maximum file size that can be transferred to
+      1 MB.
+    - When setting an avatar image, no longer downscale it to
+      96x96.
+  + Sametime:
+    - Fix a crash in Sametime when a malicious server sends us an
+      abnormally long user ID. (CVE-2013-0273)
+  + Yahoo!:
+    - Fix a double-free in profile/picture loading code.
+      (pidgin.im#15053)
+    - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
+  + Plugins:
+    - The Voice/Video Settings plugin supports using the sndio
+      GStreamer backends. (pidgin.im#14414)
+    - Fix a crash in the Contact Availability Detection plugin.
+      (pidgin.im#15327)
+    - Make the Message Notification plugin more friendly to
+      non-X11 GTK+, such as MacPorts' +no_x11 variant.
+  + Windows-Specific Changes:
+    - Compile with secure flags (pidgin.im#15290)
+    - Installer downloads GTK+ Runtime and Debug Symbols more
+      securely. (pidgin.im#15277)
+    - Updates to a number of dependencies, some of which have
+      security related fixes. (pidgin.im#14571, pidgin.im#15285,
+      pidgin.im#15286)
+      . ATK 1.32.0-2
+      . Cyrus SASL 2.1.25
+      . expat 2.1.0-1
+      . freetype 2.4.10-1
+      . gettext 0.18.1.1-2
+      . Glib 2.28.8-1
+      . libpng 1.4.12-1
+      . libxml2 2.9.0-1
+      . NSS 3.13.6 and NSPR 4.9.2
+      . Pango 1.29.4-1
+      . SILC 1.1.10
+      . zlib 1.2.5-2
+    - Patch libmeanwhile (sametime library) to fix crash.
+      (pidgin.im#12637)
+
 -------------------------------------------------------------------
 Fri Oct 12 13:07:50 UTC 2012 - dimstar@opensuse.org
 

pidgin.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package pidgin
 #
-# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -28,7 +28,7 @@ Name:           pidgin
 Summary:        Multiprotocol Instant Messaging Client
 License:        GPL-2.0+
 Group:          Productivity/Networking/Instant Messenger
-Version:        2.10.6
+Version:        2.10.7
 Release:        0
 # FIXME: Remove unconditional --disable-vv parameter from configure once pidgin is ported to farstream 0.2
 Url:            http://www.pidgin.im/
@@ -513,7 +513,7 @@ find $RPM_BUILD_ROOT%{_libdir}/finch -maxdepth 1 -xtype f -print | \
 
 %files -f %{name}.lst
 %defattr(-,root,root)
-%doc AUTHORS COPYING COPYRIGHT ChangeLog NEWS README README.MTN doc/the_penguin.txt
+%doc AUTHORS COPYING COPYRIGHT ChangeLog NEWS README doc/the_penguin.txt
 %dir %{_libdir}/pidgin
 %{_libdir}/pidgin/perl
 %{_bindir}/pidgin