Hello community, here is the log from the commit of package pidgin.1428 for openSUSE:12.3:Update checked in at 2013-03-21 07:37:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.3:Update/pidgin.1428 (Old) and /work/SRC/openSUSE:12.3:Update/.pidgin.1428.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pidgin.1428", Maintainer is "" Changes: -------- New Changes file: --- /dev/null 2013-02-26 18:15:11.936010755 +0100 +++ /work/SRC/openSUSE:12.3:Update/.pidgin.1428.new/pidgin.changes 2013-03-21 07:37:04.000000000 +0100 @@ -0,0 +1,1913 @@ +------------------------------------------------------------------- +Sun Mar 10 13:57:49 UTC 2013 - dims...@opensuse.org + +- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the + IRC module to be loaded (bnc#806975). + +------------------------------------------------------------------- +Fri Feb 15 09:26:24 UTC 2013 - christoph.mieb...@web.de + +- Update to version 2.10.7 (bnc#804742): + + Alien hatchery: + - No changes + + General: + - The configure script will now exit with status 1 when + specifying invalid protocol plugins using the + --with-static-prpls and --with-dynamic-prpls arguments. + (pidgin.im#15316) + + libpurple: + - Fix a crash when receiving UPnP responses with abnormally + long values. (CVE-2013-0274) + - Don't link directly to libgcrypt when building with GnuTLS + support. (pidgin.im#15329) + - Fix UPnP mappings on routers that return empty <URLBase/> + elements in their response. (pidgin.im#15373) + - Tcl plugin uses saner, race-free plugin loading. + - Fix the Tcl signals-test plugin for savedstatus-changed. + (pidgin.im#15443) + + Pidgin: + - Make Pidgin more friendly to non-X11 GTK+, such as + MacPorts' +no_x11 variant. + + Gadu-Gadu: + - Fix a crash at startup with large contact list. Avatar + support for buddies will be disabled until 3.0.0. + (pidgin.im#15226, pidgin.im#14305) + + IRC: + - Support for SASL authentication. (pidgin.im#13270) + - Print topic setter information at channel join. + (pidgin.im#13317) + + MSN: + - Fix SSL certificate issue when signing into MSN for some + users. + - Fix a crash when removing a user before its icon is loaded. + (pidgin.im#15217) + + MXit: + - Fix a bug where a remote MXit user could possibly specify a + local file path to be written to. (CVE-2013-0271) + - Fix a bug where the MXit server or a man-in-the-middle could + potentially send specially crafted data that could overflow + a buffer and lead to a crash or remote code execution. + (CVE-2013-0272) + - Display farewell messages in a different colour to + distinguish them from normal messages. + - Add support for typing notification. + - Add support for the Relationship Status profile attribute. + - Remove all reference to Hidden Number. + - Ignore new invites to join a GroupChat if you're already + joined, or still have a pending invite. + - The buddy's name was not centered vertically in the + buddy-list if they did not have a status-message or mood + set. + - Fix decoding of font-size changes in the markup of received + messages. + - Increase the maximum file size that can be transferred to + 1 MB. + - When setting an avatar image, no longer downscale it to + 96x96. + + Sametime: + - Fix a crash in Sametime when a malicious server sends us an + abnormally long user ID. (CVE-2013-0273) + + Yahoo!: + - Fix a double-free in profile/picture loading code. + (pidgin.im#15053) + - Fix retrieving server-side buddy aliases. (pidgin.im#15381) + + Plugins: + - The Voice/Video Settings plugin supports using the sndio + GStreamer backends. (pidgin.im#14414) + - Fix a crash in the Contact Availability Detection plugin. + (pidgin.im#15327) + - Make the Message Notification plugin more friendly to + non-X11 GTK+, such as MacPorts' +no_x11 variant. + + Windows-Specific Changes: + - Compile with secure flags (pidgin.im#15290) + - Installer downloads GTK+ Runtime and Debug Symbols more + securely. (pidgin.im#15277) + - Updates to a number of dependencies, some of which have + security related fixes. (pidgin.im#14571, pidgin.im#15285, + pidgin.im#15286) + . ATK 1.32.0-2 + . Cyrus SASL 2.1.25 + . expat 2.1.0-1 + . freetype 2.4.10-1 + . gettext 0.18.1.1-2 + . Glib 2.28.8-1 + . libpng 1.4.12-1 + . libxml2 2.9.0-1 + . NSS 3.13.6 and NSPR 4.9.2 + . Pango 1.29.4-1 + . SILC 1.1.10 + . zlib 1.2.5-2 + - Patch libmeanwhile (sametime library) to fix crash. + (pidgin.im#12637) + +------------------------------------------------------------------- +Fri Oct 12 13:07:50 UTC 2012 - dims...@opensuse.org + +- Fix build on openSUSE < 12.2: inverted %if needs some brackets + if it's a more complex statement. + +------------------------------------------------------------------- +Tue Oct 9 10:05:59 UTC 2012 - dims...@opensuse.org + +- Introduce with_evolution defines, which enables/disables the + evolution plugin conditionally (only available on openSUSE<=12.2) + as pidgin does not yet support GNOME 3.6 (pidgin.im#15353) + + if with_evolution is not defined (false/0): + - evolution-data-server BuildRequires is being skipped + - Do not pass --with-gevolution to configure. + - Do not build the -evolution sub package + - Obsolete pidgin-evolution from the main package. +- Pass --disable-vv to configure, as farstream 0.2 support is not + avaialble yet. + +------------------------------------------------------------------- +Sun Jul 8 22:26:05 UTC 2012 - christoph.mieb...@web.de + +- Update to version 2.10.6: + + Pidgin: + - Fix a bug that requires a triple-click to open a conversation + window from the buddy list. + +------------------------------------------------------------------- +Fri Jul 6 08:26:22 UTC 2012 - christoph.mieb...@web.de + +- Update to version 2.10.5: + + libpurple: + - Add support for GNOME3 proxy settings. + + Pidgin: + - Fix a crash that may occur when trying to ignore a user who + is not in the current chat room. + + MSN: + - Fix building with MSVC on Windows (broken in 2.10.4). + + MXit: + - Fix a buffer overflow vulnerability when parsing incoming + messages containing inline images. (CVE-2012-3374) +- Rebase pidgin-gnome-keyring.patch. + +------------------------------------------------------------------- +Mon May 7 08:52:26 UTC 2012 - christoph.mieb...@web.de + +- Update to version 2.10.4: + + General: + - Support building against Farstream in addition to Farsight. + + IRC: + - Disable periodic WHO timer. IRC channel user lists will no + longer automatically display away status, but libpurple will + be much kinder to the network. + - Print unknown numerics to channel windows if we can associate + them. + + MSN: + - Fix a possible crash when receiving messages with certain + characters or character encodings. + + XMPP: + - Fix a possible crash when receiving a series of specially + crafted file transfer requests. (CVE-2012-2214) + + Windows-Specific Changes: + - Words added to spell check dictionaries are saved across + restarts of Pidgin. +- Drop pidgin-port-to-farstream.patch: fixed upstream + +------------------------------------------------------------------- +Mon Mar 26 11:57:18 UTC 2012 - christoph.mieb...@web.de + +- Update to version 2.10.3: + + MSN: + - Fix buddies not going offline. + +------------------------------------------------------------------- +Fri Mar 23 11:29:23 UTC 2012 - vu...@opensuse.org + +- Finish transition from farsight2 to farstream in 12.2: + + Update pidgin-port-to-farstream.patch to latest version of the + patch. + + Add farstream-devel BuildRequires on openSUSE > 12.1, now that + farstream is in Factory. + + Stop passing --disable-vv to configure on > 12.1. +- Pass --disable-schemas-install to configure: this should be used + when packaging applications with gconf schemas. + +------------------------------------------------------------------- +Wed Mar 14 11:12:34 UTC 2012 - vu...@opensuse.org + +- Update to version 2.10.2: + + General: + - Fix compilation when using binutils 2.22 and new GDK pixbuf. + - Fix compilation of the MXit protocol plugin with GLib 2.31. + + Pidgin: + - Add support for the GNOME3 Network dialog. ++++ 1716 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:12.3:Update/.pidgin.1428.new/pidgin.changes New: ---- pidgin-2.10.7.tar.bz2 pidgin-NLD-smiley-theme.tar.bz2 pidgin-Tango-smiley-theme.tar.bz2 pidgin-fix-perl-build.patch pidgin-gnome-keyring.patch pidgin-irc-sasl.patch pidgin-mono-buildfix.patch pidgin-nonblock-common.patch pidgin-nonblock-common2.patch pidgin-nonblock-gwim.patch pidgin-prefs.xml pidgin.changes pidgin.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pidgin.spec ++++++ ++++ 661 lines (skipped) ++++++ pidgin-fix-perl-build.patch ++++++ Index: pidgin-2.7.10/libpurple/plugins/perl/common/Makefile.PL.in =================================================================== --- pidgin-2.7.10.orig/libpurple/plugins/perl/common/Makefile.PL.in +++ pidgin-2.7.10/libpurple/plugins/perl/common/Makefile.PL.in @@ -10,7 +10,6 @@ WriteMakefile( (ABSTRACT_FROM => '@srcdir@/Purple.pm', # finds $ABSTRACT AUTHOR => 'Purple <http://pidgin.im/>') : ()), 'DEFINE' => '@DEBUG_CFLAGS@', - 'dynamic_lib' => { 'OTHERLDFLAGS' => '@LDFLAGS@' }, 'INC' => '-I. -I@srcdir@ -I@top_srcdir@ -I@top_srcdir@/libpurple @GLIB_CFLAGS@', 'OBJECT' => '$(O_FILES)', # link all the C files too # 'OPTIMIZE' => '-g', # For debugging Index: pidgin-2.7.10/pidgin/plugins/perl/common/Makefile.PL.in =================================================================== --- pidgin-2.7.10.orig/pidgin/plugins/perl/common/Makefile.PL.in +++ pidgin-2.7.10/pidgin/plugins/perl/common/Makefile.PL.in @@ -9,7 +9,6 @@ WriteMakefile( ('ABSTRACT_FROM' => '@srcdir@/Pidgin.pm', # finds $ABSTRACT 'AUTHOR' => 'Pidgin <http://pidgin.im/>') : ()), 'DEFINE' => '@DEBUG_CFLAGS@', - 'dynamic_lib' => { 'OTHERLDFLAGS' => '@LDFLAGS@' }, 'INC' => '-I. -I@srcdir@ -I@top_srcdir@ -I@top_srcdir@/libpurple -I@top_srcdir@/pidgin @GTK_CFLAGS@', 'OBJECT' => '$(O_FILES)', # link all the C files too 'TYPEMAPS' => ["@top_srcdir@/libpurple/plugins/perl/common/typemap"], ++++++ pidgin-gnome-keyring.patch ++++++ diff -Naur pidgin-2.10.5.orig/configure.ac pidgin-2.10.5/configure.ac --- pidgin-2.10.5.orig/configure.ac 2012-07-06 13:14:25.678713118 +0200 +++ pidgin-2.10.5/configure.ac 2012-07-06 13:20:39.253322728 +0200 @@ -1858,6 +1858,20 @@ [AC_HELP_STRING([--with-nss-libs=PREFIX], [specify location of Mozilla nss3 libs.])], [with_nss_libs="$withval"]) +dnl ####################################################################### +dnl # Check for gnome-keyring +dnl #--enable-gnome-keyring=(yes|no) +dnl ####################################################################### +AC_ARG_ENABLE(gnome-keyring, + AC_HELP_STRING([--enable-gnome-keyring], + [use gnome keyring for storing password [default=no]]),, + enable_gnome_keyring=no) +if test "x$enable_gnome_keyring" = "xyes"; then + PKG_CHECK_MODULES(PURPLE_KEYRING, + gnome-keyring-1, + AC_DEFINE(PURPLE_ENABLE_KEYRING, [], [Set if we should use gnome-keyring])) +fi + if test -n "$with_nspr_includes" || test -n "$with_nspr_libs" || \ test -n "$with_nss_includes" || test -n "$with_nss_libs" || diff -Naur pidgin-2.10.5.orig/libpurple/account.c pidgin-2.10.5/libpurple/account.c --- pidgin-2.10.5.orig/libpurple/account.c 2012-07-06 13:14:25.678713118 +0200 +++ pidgin-2.10.5/libpurple/account.c 2012-07-06 13:20:39.273323295 +0200 @@ -49,6 +49,13 @@ #define PURPLE_ACCOUNT_GET_PRIVATE(account) \ ((PurpleAccountPrivate *) (account->priv)) +#ifdef PURPLE_ENABLE_KEYRING +#include <gnome-keyring.h> + +static char * purple_account_get_password_from_keyring (const char *_prpl, const char *_user); +static gboolean purple_account_set_password_in_keyring (const char *_prpl, const char *_user, const char *password); +#endif + /* TODO: Should use PurpleValue instead of this? What about "ui"? */ typedef struct { @@ -379,8 +386,13 @@ if (purple_account_get_remember_password(account) && ((tmp = purple_account_get_password(account)) != NULL)) { +#ifdef PURPLE_ENABLE_KEYRING + purple_account_set_password_in_keyring( purple_account_get_protocol_id(account), + purple_account_get_username(account), tmp); +#else child = xmlnode_new_child(node, "password"); xmlnode_insert_data(child, tmp, -1); +#endif } if ((tmp = purple_account_get_alias(account)) != NULL) @@ -875,17 +887,30 @@ } ret = purple_account_new(name, _purple_oscar_convert(name, protocol_id)); /* XXX: */ - g_free(name); - g_free(protocol_id); - - /* Read the password */ - child = xmlnode_get_child(node, "password"); - if ((child != NULL) && ((data = xmlnode_get_data(child)) != NULL)) + gboolean got_pwd = FALSE; +#ifdef PURPLE_ENABLE_KEYRING + data = purple_account_get_password_from_keyring(protocol_id, name); + if (data) { + got_pwd = TRUE; purple_account_set_remember_password(ret, TRUE); purple_account_set_password(ret, data); g_free(data); } +#endif + if (!got_pwd) + { + /* Read the password */ + child = xmlnode_get_child(node, "password"); + if ((child != NULL) && ((data = xmlnode_get_data(child)) != NULL)) + { + purple_account_set_remember_password(ret, TRUE); + purple_account_set_password(ret, data); + g_free(data); + } + } + g_free(name); + g_free(protocol_id); /* Read the alias */ child = xmlnode_get_child(node, "alias"); @@ -3245,3 +3270,60 @@ purple_signals_disconnect_by_handle(handle); purple_signals_unregister_by_instance(handle); } + +#ifdef PURPLE_ENABLE_KEYRING +static char * +purple_account_get_password_from_keyring(const char *_prpl, const char *_user) +{ + GnomeKeyringNetworkPasswordData *found_item; + GnomeKeyringResult result; + GList *matches; + char *password; + + matches = NULL; + + result = gnome_keyring_find_network_password_sync ( + _user, /* user */ + NULL, /* domain */ + "gaim.local", /* server */ + NULL, /* object */ + _prpl, /* protocol */ + NULL, /* authtype */ + 1863, /* port */ + &matches); + + if (result != GNOME_KEYRING_RESULT_OK) + return NULL; + + g_assert (matches != NULL && matches->data != NULL); + + found_item = (GnomeKeyringNetworkPasswordData *) matches->data; + + password = g_strdup (found_item->password); + + gnome_keyring_network_password_list_free (matches); + + return password; +} + +static gboolean +purple_account_set_password_in_keyring (const char *_prpl, const char *_user, const char *_password) +{ + GnomeKeyringResult result; + guint32 item_id; + + result = gnome_keyring_set_network_password_sync ( + NULL, /* default keyring */ + _user, /* user */ + NULL, /* domain */ + "gaim.local", /* server */ + NULL, /* object */ + _prpl, /* protocol */ + NULL, /* authtype */ + 1863, /* port */ + _password, /* password */ + &item_id); + + return result == GNOME_KEYRING_RESULT_OK; +} +#endif diff -Naur pidgin-2.10.5.orig/libpurple/Makefile.am pidgin-2.10.5/libpurple/Makefile.am --- pidgin-2.10.5.orig/libpurple/Makefile.am 2012-07-06 13:14:25.678713118 +0200 +++ pidgin-2.10.5/libpurple/Makefile.am 2012-07-06 13:20:39.257322842 +0200 @@ -305,6 +305,7 @@ $(GLIB_LIBS) \ $(LIBXML_LIBS) \ $(NETWORKMANAGER_LIBS) \ + $(PURPLE_KEYRING_LIBS) \ $(INTLLIBS) \ $(FARSTREAM_LIBS) \ $(GSTREAMER_LIBS) \ @@ -321,6 +322,7 @@ $(GLIB_CFLAGS) \ $(DEBUG_CFLAGS) \ $(DBUS_CFLAGS) \ + $(PURPLE_KEYRING_CFLAGS) \ $(LIBXML_CFLAGS) \ $(FARSTREAM_CFLAGS) \ $(GSTREAMER_CFLAGS) \ ++++++ pidgin-irc-sasl.patch ++++++ diff -upr pidgin-2.10.7.orig/libpurple/protocols/irc/Makefile.am pidgin-2.10.7/libpurple/protocols/irc/Makefile.am --- pidgin-2.10.7.orig/libpurple/protocols/irc/Makefile.am 2013-02-14 02:44:47.000000000 +0200 +++ pidgin-2.10.7/libpurple/protocols/irc/Makefile.am 2013-02-14 02:49:58.000000000 +0200 @@ -27,7 +27,7 @@ else st = pkg_LTLIBRARIES = libirc.la libirc_la_SOURCES = $(IRCSOURCES) -libirc_la_LIBADD = $(GLIB_LIBS) +libirc_la_LIBADD = $(GLIB_LIBS) $(SASL_LIBS) endif ++++++ pidgin-mono-buildfix.patch ++++++ Index: pidgin-2.7.3/libpurple/plugins/mono/loader/status-glue.c =================================================================== --- pidgin-2.7.3.orig/libpurple/plugins/mono/loader/status-glue.c +++ pidgin-2.7.3/libpurple/plugins/mono/loader/status-glue.c @@ -1,3 +1,4 @@ +#include <glib.h> #include "status.h" #include "mono-helper.h" #include "mono-glue.h" ++++++ pidgin-nonblock-common.patch ++++++ ++++ 996 lines (skipped) ++++++ pidgin-nonblock-common2.patch ++++++ Index: pidgin-2.7.6/libpurple/Makefile.am =================================================================== --- pidgin-2.7.6.orig/libpurple/Makefile.am +++ pidgin-2.7.6/libpurple/Makefile.am @@ -50,6 +50,8 @@ purple_coresources = \ desktopitem.c \ eventloop.c \ ft.c \ + purple-fifo.c \ + purple-io.c \ idle.c \ imgstore.c \ log.c \ @@ -117,6 +119,8 @@ purple_coreheaders = \ desktopitem.h \ eventloop.h \ ft.h \ + purple-fifo.h \ + purple-io.h \ gaim-compat.h \ idle.h \ imgstore.h \ ++++++ pidgin-nonblock-gwim.patch ++++++ Index: pidgin-2.7.6/libpurple/protocols/novell/nmconn.c =================================================================== --- pidgin-2.7.6.orig/libpurple/protocols/novell/nmconn.c +++ pidgin-2.7.6/libpurple/protocols/novell/nmconn.c @@ -191,6 +191,12 @@ void nm_release_conn(NMConn *conn) g_free(conn->ssl_conn); conn->ssl_conn = NULL; } + + if (conn->io) { + purple_io_destroy (conn->io); + conn->io = NULL; + } + g_free(conn->addr); conn->addr = NULL; g_free(conn); @@ -203,11 +209,23 @@ nm_tcp_write(NMConn * conn, const void * if (conn == NULL || buff == NULL) return -1; - if (!conn->use_ssl) - return (write(conn->fd, buff, len)); - else if (conn->ssl_conn && conn->ssl_conn->write) - return (conn->ssl_conn->write(conn->ssl_conn->data, buff, len)); - else + if (!conn->use_ssl) { + if (!conn->io || purple_io_get_fd (conn->io) != conn->fd) { + if (conn->io) + purple_io_destroy (conn->io); + conn->io = purple_io_new (conn->fd); + } + + return purple_io_write_bytes (conn->io, buff, len); + } else if (conn->ssl_conn && conn->ssl_conn->data && conn->ssl_conn->write) { + if (!conn->io || purple_io_get_ssl_connection (conn->io) != conn->ssl_conn->data) { + if (conn->io) + purple_io_destroy (conn->io); + conn->io = purple_io_new_ssl (conn->ssl_conn->data); + } + + return purple_io_write_bytes (conn->io, buff, len); + } else return -1; } Index: pidgin-2.7.6/libpurple/protocols/novell/nmconn.h =================================================================== --- pidgin-2.7.6.orig/libpurple/protocols/novell/nmconn.h +++ pidgin-2.7.6/libpurple/protocols/novell/nmconn.h @@ -24,6 +24,7 @@ typedef struct _NMConn NMConn; typedef struct _NMSSLConn NMSSLConn; +#include "purple-io.h" #include "nmfield.h" #include "nmuser.h" @@ -42,6 +43,9 @@ struct _NMConn /* The file descriptor of the socket for the connection. */ int fd; + /* The buffering I/O wrapper. */ + PurpleIO *io; + /* The transaction counter. */ int trans_id; Index: pidgin-2.7.6/libpurple/protocols/novell/novell.c =================================================================== --- pidgin-2.7.6.orig/libpurple/protocols/novell/novell.c +++ pidgin-2.7.6/libpurple/protocols/novell/novell.c @@ -2223,17 +2223,12 @@ static void novell_close(PurpleConnection * gc) { NMUser *user; - NMConn *conn; if (gc == NULL) return; user = gc->proto_data; if (user) { - conn = user->conn; - if (conn && conn->ssl_conn) { - purple_ssl_close(user->conn->ssl_conn->data); - } nm_deinitialize_user(user); } gc->proto_data = NULL; ++++++ pidgin-prefs.xml ++++++ <?xml version='1.0' encoding='UTF-8' ?> <!-- This is the file that will be used to create the default configuration for users. The easy way to edit it is to change options in a client like pidgin, and copy the relevant parts of ~/.purple/prefs.xml here --> -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org