Ubuntu
pidgin package

Change log for pidgin package in Ubuntu

1 → 75 of 228 results First • Previous • • Last
Published in oracular-release
Published in noble-release
Deleted in noble-proposed (Reason: Moved to noble) 
pidgin (1:2.14.13-1ubuntu2) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <email address hidden>  Sun, 31 Mar 2024 06:47:36 +0000
Superseded in noble-release
Deleted in noble-proposed (Reason: Moved to noble) 
pidgin (1:2.14.13-1ubuntu1) noble; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch (change committed on git)
    - add unity integration
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - pounce-webview.patch

 -- Gianfranco Costamagna <email address hidden>  Mon, 11 Mar 2024 22:55:21 +0100
Superseded in noble-proposed 
pidgin (1:2.14.12-1ubuntu4) noble; urgency=medium

  * No-change rebuild against libperl5.38t64

 -- Steve Langasek <email address hidden>  Sat, 09 Mar 2024 18:22:45 +0000
Superseded in noble-proposed 
pidgin (1:2.14.12-1ubuntu3) noble; urgency=medium

  * No-change rebuild for perlapi5.38t64.

 -- Matthias Klose <email address hidden>  Sat, 02 Mar 2024 17:04:00 +0100
Deleted in noble-updates (Reason: superseded by release)
Superseded in noble-release
Deleted in noble-proposed (Reason: Moved to noble) 
pidgin (1:2.14.12-1ubuntu2) noble; urgency=medium

  * No-change rebuild for the perl update.

 -- Matthias Klose <email address hidden>  Wed, 10 Jan 2024 14:12:46 +0100
Published in jammy-updates
Deleted in jammy-proposed (Reason: moved to -updates) 
pidgin (1:2.14.8-1ubuntu2.1) jammy; urgency=medium

  * Fix freezes when creating long message or resizing window (LP: #1975519)

 -- Julian Andres Klode <email address hidden>  Tue, 11 Jul 2023 18:56:57 +0200
Superseded in noble-release
Published in mantic-release
Published in lunar-release
Deleted in lunar-proposed (Reason: Moved to lunar) 
pidgin (1:2.14.12-1ubuntu1) lunar; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch (change committed on git)
    - add unity integration
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - pounce-webview.patch
Superseded in lunar-release
Deleted in lunar-proposed (Reason: Moved to lunar) 
pidgin (1:2.14.10-3ubuntu2) lunar; urgency=medium

  * Rebuild against new perlapi-5.36.

 -- Gianfranco Costamagna <email address hidden>  Fri, 04 Nov 2022 16:51:11 +0100
Superseded in lunar-proposed 
pidgin (1:2.14.10-3ubuntu1) lunar; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch (change committed on git)
    - add unity integration
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - pounce-webview.patch

 -- Gianfranco Costamagna <email address hidden>  Fri, 04 Nov 2022 11:30:42 +0100
Superseded in lunar-release
Obsolete in kinetic-release
Deleted in kinetic-proposed (Reason: Moved to kinetic) 
pidgin (1:2.14.10-1ubuntu1) kinetic; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch (change committed on git)
    - add unity integration
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - pounce-webview.patch
Superseded in kinetic-release
Deleted in kinetic-proposed (Reason: Moved to kinetic) 
pidgin (1:2.14.9-2ubuntu1) kinetic; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch (change committed on git)
    - add unity integration
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - pounce-webview.patch
Superseded in kinetic-release
Deleted in kinetic-proposed (Reason: Moved to kinetic) 
pidgin (1:2.14.9-1ubuntu1) kinetic; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch (change committed on git)
    - add unity integration
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - pounce-webview.patch
Superseded in kinetic-release
Published in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy) 
pidgin (1:2.14.8-1ubuntu2) jammy; urgency=medium

  * No-change rebuild for the perl update.

 -- Matthias Klose <email address hidden>  Sun, 06 Feb 2022 13:48:26 +0100
Superseded in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy) 
pidgin (1:2.14.8-1ubuntu1) jammy; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch (change committed on git)
    - add unity integration
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - pounce-webview.patch

 -- Gianfranco Costamagna <email address hidden>  Wed, 01 Dec 2021 15:10:42 +0100
Superseded in jammy-proposed 
pidgin (1:2.14.7-2ubuntu1) jammy; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch (change committed on git)
    - add unity integration
    - make libpurple-dev multiarch (not tagged ad such since
      it still requires work on plugins)
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - pounce-webview.patch
Superseded in jammy-release
Obsolete in impish-release
Obsolete in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release) 
pidgin (1:2.14.1-1ubuntu1) hirsute; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch (change committed on git)
    - add unity integration
    - make libpurple-dev multiarch (not tagged ad such since
      it still requires work on plugins)
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - pounce-webview.patch

 -- Gianfranco Costamagna <email address hidden>  Thu, 04 Feb 2021 11:42:03 +0100
Superseded in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release) 
pidgin (1:2.13.0-2.2ubuntu5) hirsute; urgency=medium

  * No-change rebuild for the perl update.

 -- Matthias Klose <email address hidden>  Mon, 09 Nov 2020 10:51:36 +0100
Superseded in hirsute-release
Obsolete in groovy-release
Published in focal-release
Deleted in focal-proposed (Reason: moved to Release) 
pidgin (1:2.13.0-2.2ubuntu4) focal; urgency=medium

  * No-change rebuild with fixed binutils on arm64.

 -- Matthias Klose <email address hidden>  Mon, 10 Feb 2020 08:23:21 +0100
Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release) 
pidgin (1:2.13.0-2.2ubuntu3) focal; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch (change committed on git)
    - add unity integration
    - make libpurple-dev multiarch (not tagged ad such since
      it still requires work on plugins)
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - pounce-webview.patch

 -- Gianfranco Costamagna <email address hidden>  Thu, 09 Jan 2020 16:04:10 +0100
Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release) 
pidgin (1:2.13.0-2.2ubuntu2) focal; urgency=medium

  * No-change rebuild for the perl update.

 -- Matthias Klose <email address hidden>  Sat, 19 Oct 2019 08:05:13 +0000
Superseded in focal-release
Obsolete in eoan-release
Deleted in eoan-proposed (Reason: moved to Release) 
pidgin (1:2.13.0-2.2ubuntu1) eoan; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch
    - add unity integration
    - make libpurple-dev multiarch (not tagged ad such since
      it still requires work on plugins)
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - xmessagingmenu.patch
      - pounce-webview.patch
      - remove-double-chat-section.patch (fix for desktop file)
Superseded in eoan-release
Deleted in eoan-proposed (Reason: moved to release) 
pidgin (1:2.13.0-2ubuntu1) eoan; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch
    - add unity integration
    - make libpurple-dev multiarch (not tagged ad such since
      it still requires work on plugins)
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - xmessagingmenu.patch
      - pounce-webview.patch
      - remove-double-chat-section.patch (fix for desktop file)
Superseded in eoan-release
Obsolete in disco-release
Deleted in disco-proposed (Reason: moved to release) 
pidgin (1:2.13.0-1ubuntu2) disco; urgency=medium

  * No-change rebuild for the perl 5.28 transition.

 -- Adam Conrad <email address hidden>  Fri, 02 Nov 2018 19:47:56 -0600
Superseded in disco-release
Obsolete in cosmic-release
Deleted in cosmic-proposed (Reason: moved to release) 
pidgin (1:2.13.0-1ubuntu1) cosmic; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch
    - add unity integration
    - make libpurple-dev multiarch (not tagged ad such since
      it still requires work on plugins)
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - xmessagingmenu.patch
      - pounce-webview.patch
      - remove-double-chat-section.patch (fix for desktop file)
  * Drop python3 patch: upstream
Superseded in cosmic-release
Deleted in cosmic-proposed (Reason: moved to release) 
pidgin (1:2.12.0-1ubuntu5) cosmic; urgency=medium

  * No-change rebuild for ncurses soname changes.

 -- Matthias Klose <email address hidden>  Thu, 03 May 2018 14:17:58 +0000
Superseded in cosmic-release
Published in bionic-release
Deleted in bionic-proposed (Reason: moved to release) 
pidgin (1:2.12.0-1ubuntu4) bionic; urgency=medium

  * Explicitly enable python3 in rules file
  * Remove hg-remove-SIGCHLD-handler.patch: Useless now
    This patch is now causing an issue with zombie processes.
    LP: #1245666.
    Thanks dx for the hint and patch, and tsimonq2/sarnold for the
    pings!

 -- Gianfranco Costamagna <email address hidden>  Thu, 08 Mar 2018 19:29:36 +0100
Superseded in bionic-proposed 
pidgin (1:2.12.0-1ubuntu3) bionic; urgency=medium

  * Remove hg-remove-SIGCHLD-handler.patch: Useless now
    This patch is now causing an issue with zombie processes.
    LP: #1245666.
    Thanks dx for the hint and patch, and tsimonq2/sarnold for the
    pings!

 -- Gianfranco Costamagna <email address hidden>  Thu, 08 Mar 2018 19:29:36 +0100
Superseded in bionic-release
Obsolete in artful-release
Deleted in artful-proposed (Reason: moved to release) 
pidgin (1:2.12.0-1ubuntu2) artful; urgency=medium

  * No-change rebuild for perl 5.26.0.

 -- Matthias Klose <email address hidden>  Wed, 26 Jul 2017 20:29:12 +0000
Published in precise-updates
Published in precise-security 
pidgin (1:2.10.3-0ubuntu1.8) precise-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds write when stripping xml
    - debian/patches/CVE-2017-2640.patch: improve entity processing in
      libpurple/util.c.
    - CVE-2017-2640

 -- Marc Deslauriers <email address hidden>  Mon, 13 Mar 2017 14:31:38 -0400
Published in xenial-updates
Published in xenial-security 
pidgin (1:2.10.12-0ubuntu5.2) xenial-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds write when stripping xml
    - debian/patches/CVE-2017-2640.patch: improve entity processing in
      libpurple/util.c.
    - CVE-2017-2640

 -- Marc Deslauriers <email address hidden>  Mon, 13 Mar 2017 14:30:08 -0400
Published in trusty-updates
Published in trusty-security 
pidgin (1:2.10.9-0ubuntu3.4) trusty-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds write when stripping xml
    - debian/patches/CVE-2017-2640.patch: improve entity processing in
      libpurple/util.c.
    - CVE-2017-2640

 -- Marc Deslauriers <email address hidden>  Mon, 13 Mar 2017 14:30:53 -0400
Obsolete in yakkety-updates
Obsolete in yakkety-security 
pidgin (1:2.10.12-0ubuntu9.1) yakkety-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds write when stripping xml
    - debian/patches/CVE-2017-2640.patch: improve entity processing in
      libpurple/util.c.
    - CVE-2017-2640

 -- Marc Deslauriers <email address hidden>  Mon, 13 Mar 2017 14:28:04 -0400
Superseded in artful-release
Obsolete in zesty-release
Deleted in zesty-proposed (Reason: moved to release) 
pidgin (1:2.12.0-1ubuntu1) zesty; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch
    - use python3
    - add unity integration
    - make libpurple-dev multiarch (not tagged ad such since
      it still requires work on plugins)
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - xmessagingmenu.patch
      - pounce-webview.patch
      - hg-remove-SIGCHLD-handler.patch
      - remove-double-chat-section.patch (fix for desktop file)

 -- Gianfranco Costamagna <email address hidden>  Fri, 10 Mar 2017 09:42:47 +0100
Superseded in zesty-release
Deleted in zesty-proposed (Reason: moved to release) 
pidgin (1:2.11.0-3ubuntu2) zesty; urgency=medium

  * No-change rebuild against libnspr4

 -- Andy Whitcroft <email address hidden>  Fri, 24 Feb 2017 11:14:57 +0000
Superseded in zesty-release
Deleted in zesty-proposed (Reason: moved to release) 
pidgin (1:2.11.0-3ubuntu1) zesty; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - Bump epoch
    - use python3
    - add unity integration
    - make libpurple-dev multiarch (not tagged ad such since
      it still requires work on plugins)
    - update preferences file.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - xmessagingmenu.patch
      - pounce-webview.patch
      - hg-remove-SIGCHLD-handler.patch
      - remove-double-chat-section.patch (fix for desktop file)
    - drop CVE fixes, already upstreamed in the new version
    - drop gconf and hardening-wrapper delta, in Debian.

 -- Gianfranco Costamagna <email address hidden>  Wed, 11 Jan 2017 19:36:34 +0100
Superseded in zesty-release
Deleted in zesty-proposed (Reason: moved to release) 
pidgin (1:2.10.12-0ubuntu10) zesty; urgency=medium

  * No-change rebuild for perl 5.24 transition

 -- Iain Lane <email address hidden>  Mon, 24 Oct 2016 17:10:55 +0100
Superseded in zesty-release
Obsolete in yakkety-release
Deleted in yakkety-proposed (Reason: moved to release) 
pidgin (1:2.10.12-0ubuntu9) yakkety; urgency=medium

  * Include fix from Debian for FTBFS with full hardening flags

 -- Graham Inggs <email address hidden>  Sat, 08 Oct 2016 21:15:40 +0200
Superseded in yakkety-proposed 
pidgin (1:2.10.12-0ubuntu8) yakkety; urgency=medium

  * User dpkg-dev's hardening support instead of hardening-wrapper.

 -- Matthias Klose <email address hidden>  Wed, 05 Oct 2016 05:55:22 +0200
Superseded in yakkety-release
Deleted in yakkety-proposed (Reason: moved to release) 
pidgin (1:2.10.12-0ubuntu7) yakkety; urgency=medium

  [ AsciiWolf ]
  * Fix desktop file (LP: #1575338)

 -- Gianfranco Costamagna <email address hidden>  Fri, 16 Sep 2016 17:58:36 +0200
Superseded in yakkety-release
Deleted in yakkety-proposed (Reason: moved to release) 
pidgin (1:2.10.12-0ubuntu6) yakkety; urgency=medium

  * SECURITY UPDATE: denial of service and code execution in MXIT protocol
    - debian/patches/CVE-2016-*.patch: fix multiple issues.
    - CVE-2016-2365
    - CVE-2016-2366
    - CVE-2016-2367
    - CVE-2016-2368
    - CVE-2016-2369
    - CVE-2016-2370
    - CVE-2016-2371
    - CVE-2016-2372
    - CVE-2016-2373
    - CVE-2016-2374
    - CVE-2016-2375
    - CVE-2016-2376
    - CVE-2016-2377
    - CVE-2016-2378
    - CVE-2016-2380
    - CVE-2016-4323

 -- Marc Deslauriers <email address hidden>  Tue, 12 Jul 2016 08:17:31 -0400
Superseded in precise-updates
Superseded in precise-security 
pidgin (1:2.10.3-0ubuntu1.7) precise-security; urgency=medium

  * SECURITY UPDATE: denial of service and code execution in MXIT protocol
    - debian/patches/CVE-2016-*.patch: fix multiple issues.
    - CVE-2016-2365
    - CVE-2016-2366
    - CVE-2016-2367
    - CVE-2016-2368
    - CVE-2016-2369
    - CVE-2016-2370
    - CVE-2016-2371
    - CVE-2016-2372
    - CVE-2016-2373
    - CVE-2016-2374
    - CVE-2016-2375
    - CVE-2016-2376
    - CVE-2016-2377
    - CVE-2016-2378
    - CVE-2016-2380
    - CVE-2016-4323

 -- Marc Deslauriers <email address hidden>  Tue, 12 Jul 2016 09:12:35 -0400
Superseded in trusty-updates
Superseded in trusty-security 
pidgin (1:2.10.9-0ubuntu3.3) trusty-security; urgency=medium

  * SECURITY UPDATE: denial of service and code execution in MXIT protocol
    - debian/patches/CVE-2016-*.patch: fix multiple issues.
    - CVE-2016-2365
    - CVE-2016-2366
    - CVE-2016-2367
    - CVE-2016-2368
    - CVE-2016-2369
    - CVE-2016-2370
    - CVE-2016-2371
    - CVE-2016-2372
    - CVE-2016-2373
    - CVE-2016-2374
    - CVE-2016-2375
    - CVE-2016-2376
    - CVE-2016-2377
    - CVE-2016-2378
    - CVE-2016-2380
    - CVE-2016-4323

 -- Marc Deslauriers <email address hidden>  Tue, 12 Jul 2016 08:54:12 -0400
Obsolete in wily-updates
Obsolete in wily-security 
pidgin (1:2.10.11-0ubuntu4.2) wily-security; urgency=medium

  * SECURITY UPDATE: denial of service and code execution in MXIT protocol
    - debian/patches/CVE-2016-*.patch: fix multiple issues.
    - CVE-2016-2365
    - CVE-2016-2366
    - CVE-2016-2367
    - CVE-2016-2368
    - CVE-2016-2369
    - CVE-2016-2370
    - CVE-2016-2371
    - CVE-2016-2372
    - CVE-2016-2373
    - CVE-2016-2374
    - CVE-2016-2375
    - CVE-2016-2376
    - CVE-2016-2377
    - CVE-2016-2378
    - CVE-2016-2380
    - CVE-2016-4323

 -- Marc Deslauriers <email address hidden>  Tue, 12 Jul 2016 08:49:31 -0400
Superseded in xenial-updates
Superseded in xenial-security 
pidgin (1:2.10.12-0ubuntu5.1) xenial-security; urgency=medium

  * SECURITY UPDATE: denial of service and code execution in MXIT protocol
    - debian/patches/CVE-2016-*.patch: fix multiple issues.
    - CVE-2016-2365
    - CVE-2016-2366
    - CVE-2016-2367
    - CVE-2016-2368
    - CVE-2016-2369
    - CVE-2016-2370
    - CVE-2016-2371
    - CVE-2016-2372
    - CVE-2016-2373
    - CVE-2016-2374
    - CVE-2016-2375
    - CVE-2016-2376
    - CVE-2016-2377
    - CVE-2016-2378
    - CVE-2016-2380
    - CVE-2016-4323

 -- Marc Deslauriers <email address hidden>  Tue, 12 Jul 2016 08:17:31 -0400
Superseded in yakkety-release
Published in xenial-release
Deleted in xenial-proposed (Reason: moved to release) 
pidgin (1:2.10.12-0ubuntu5) xenial; urgency=medium

  [ Julien Lavergne ]
  * debian/pidgin*.install
   - Don't install gconf schemas to avoid depends on gconf (LP: #1550896).

  [ Tim Lunn ]
  * debian/control
    - Drop build-depend on gconf2 it's not need with the above change

 -- Tim Lunn <email address hidden>  Thu, 10 Mar 2016 17:06:47 +1100
Superseded in xenial-release
Deleted in xenial-proposed (Reason: moved to release) 
pidgin (1:2.10.12-0ubuntu4) xenial; urgency=medium

  * Minimize delta with Debian: remaining changes:
    - new upstream release.
    - use python3
    - add unity integration
    - make libpurple-dev multiarch
    - update symbols files
    - update preferences file.
    - drop pidgin-2.10.11-gstreamer1-debian.patch:
      - upstream.
    - drop farsight support, not enabled anymore because
      farsight has been dropped a long time ago in Ubuntu.
    - drop gadu support not in main.
    - add Ubuntu patches:
      - 04_let_crasher_for_apport.patch
      - 05_default_to_irc_ubuntu_com.patch
      - 10_docklet_default_off.patch
      - 11_buddy_list_really_show.patch
      - 13_sounds_and_timers.patch
      - 60_1024x600_gtkpounce.c.patch
      - 60_1024x600_gtkprefs.c.patch
      - xmessagingmenu.patch
      - pounce-webview.patch
      - hg-remove-SIGCHLD-handler.patch
      - python3.patch

 -- Gianfranco Costamagna <email address hidden>  Thu, 03 Mar 2016 16:11:55 +0100
Superseded in xenial-release
Deleted in xenial-proposed (Reason: moved to release) 
pidgin (1:2.10.12-0ubuntu3) xenial; urgency=medium

  * libpurple-dev should be arch: any because it ships a pkg-config
    file in a multiarch directory.
    (fixes pidgin-sipe build failures on non amd64)

 -- Gianfranco Costamagna <email address hidden>  Thu, 03 Mar 2016 13:40:23 +0100
Superseded in xenial-release
Deleted in xenial-proposed (Reason: moved to release) 
pidgin (1:2.10.12-0ubuntu2) xenial; urgency=medium

  * Move the libpurple* library files into the multiarch libdir. Adding the
    M-A: same tags still requires work on the plugin directory. See #1508632.

 -- Matthias Klose <email address hidden>  Thu, 25 Feb 2016 00:23:12 +0100
Superseded in xenial-release
Deleted in xenial-proposed (Reason: moved to release) 
pidgin (1:2.10.12-0ubuntu1) xenial; urgency=medium

  * New upstream version
  * debian/patches/python3.patch: updated, upstream fixed purple-url-handler
  * debian/patches/gstreamer1.patch,
    debian/patches/dtmf-pad.patch:
    - removed, the changes are in the new version, including the leakfix
      described in lp: #1529445
  * debian/libpurple0.symbols: updated

 -- Sebastien Bacher <email address hidden>  Tue, 23 Feb 2016 11:09:39 +0100
Superseded in wily-updates
Deleted in wily-proposed (Reason: moved to -updates) 
pidgin (1:2.10.11-0ubuntu4.1) wily; urgency=medium

  * debian/patches/hg_gst_leak.patch:
    "When receiving an error or stream finished message, we can free the
     Gstreamer pipeline so we don't leak it for each sound." (lp: #1479715)

 -- Sebastien Bacher <email address hidden>  Tue, 23 Feb 2016 11:38:09 +0100
Superseded in xenial-release
Superseded in xenial-release
Deleted in xenial-proposed (Reason: moved to release) 
pidgin (1:2.10.11-0ubuntu5) xenial; urgency=medium

  * No-change rebuild for perl 5.22.1.

 -- Mathieu Trudel-Lapierre <email address hidden>  Fri, 18 Dec 2015 14:21:55 -0500
Superseded in xenial-release
Obsolete in wily-release
Deleted in wily-proposed (Reason: moved to release) 
pidgin (1:2.10.11-0ubuntu4) wily; urgency=medium

  * No change rebuild against libfarstream-0.2-5

 -- Robert Ancell <email address hidden>  Thu, 25 Jun 2015 20:23:27 +1200
Superseded in wily-release
Deleted in wily-proposed (Reason: moved to release) 
pidgin (1:2.10.11-0ubuntu3) wily; urgency=medium

  * debian/control:
    - Build-depend on python3
    - libpurple-bin depends on python3, python3-dbus
    - Add missing depend on dbus for libpurple-bin
  * debian/patches/python3.patch:
    - Use Python 3 (LP: #1440390)

 -- Robert Ancell <email address hidden>  Thu, 11 Jun 2015 09:42:14 +1200
Superseded in wily-release
Deleted in wily-proposed (Reason: moved to release) 
pidgin (1:2.10.11-0ubuntu2) wily; urgency=medium

  * debian/control:
    - Build-depend on libgstreamer1.0-dev, libgstreamer-plugins-base1.0-dev,
      libfarstream-0.2
    - Recommend gstreamer1.0-plugins-base, gstreamer1.0-plugins-good
  * debian/patches/gstreamer1.patch:
    - Use gstreamer 1.0 (LP: #1295207)

 -- Robert Ancell <email address hidden>  Fri, 29 May 2015 11:28:51 +1200
Superseded in wily-proposed 
pidgin (1:2.10.11-0ubuntu1) wily; urgency=medium

  * New upstream release (LP: #1402424)
  * debian/patches/CVE-2014-3775.patch:
  * debian/patches/CVE-2014-3698.patch:
  * debian/patches/CVE-2014-3696.patch:
  * debian/patches/CVE-2014-3695.patch:
  * debian/patches/CVE-2014-3694.patch:
    - Applied upstream
  * debian/libpurple0.symbols:
    - Updated

 -- Robert Ancell <email address hidden>  Fri, 29 May 2015 10:51:05 +1200
Superseded in wily-release
Obsolete in vivid-release
Deleted in vivid-proposed (Reason: moved to release) 
pidgin (1:2.10.9-0ubuntu8) vivid; urgency=medium

  * SECURITY UPDATE: insufficient ssl certificate validation
    - debian/patches/CVE-2014-3694.patch: fix basic constraints checking in
      libpurple/certificate.c, libpurple/certificate.h,
      libpurple/plugins/ssl/ssl-gnutls.c, libpurple/plugins/ssl/ssl-nss.c.
    - CVE-2014-3694
  * SECURITY UPDATE: denial of service via malformed MXit emoticon response
    - debian/patches/CVE-2014-3695.patch: properly check lengths in
      libpurple/protocols/mxit/markup.c.
    - CVE-2014-3695
  * SECURITY UPDATE: denial of service via malformed Groupwise message
    - debian/patches/CVE-2014-3696.patch: check sizes in
      libpurple/protocols/novell/nmevent.c.
    - CVE-2014-3696
  * SECURITY UPDATE: XMPP information leak
    - debian/patches/CVE-2014-3698.patch: fix leaks in
      libpurple/protocols/jabber/jutil.c.
    - CVE-2014-3698
 -- Marc Deslauriers <email address hidden>   Tue, 28 Oct 2014 08:11:48 -0400
Superseded in trusty-updates
Superseded in trusty-security 
pidgin (1:2.10.9-0ubuntu3.2) trusty-security; urgency=medium

  * SECURITY UPDATE: insufficient ssl certificate validation
    - debian/patches/CVE-2014-3694.patch: fix basic constraints checking in
      libpurple/certificate.c, libpurple/certificate.h,
      libpurple/plugins/ssl/ssl-gnutls.c, libpurple/plugins/ssl/ssl-nss.c.
    - CVE-2014-3694
  * SECURITY UPDATE: denial of service via malformed MXit emoticon response
    - debian/patches/CVE-2014-3695.patch: properly check lengths in
      libpurple/protocols/mxit/markup.c.
    - CVE-2014-3695
  * SECURITY UPDATE: denial of service via malformed Groupwise message
    - debian/patches/CVE-2014-3696.patch: check sizes in
      libpurple/protocols/novell/nmevent.c.
    - CVE-2014-3696
  * SECURITY UPDATE: XMPP information leak
    - debian/patches/CVE-2014-3698.patch: fix leaks in
      libpurple/protocols/jabber/jutil.c.
    - CVE-2014-3698
 -- Marc Deslauriers <email address hidden>   Mon, 27 Oct 2014 11:36:20 -0400
Superseded in precise-updates
Superseded in precise-security 
pidgin (1:2.10.3-0ubuntu1.6) precise-security; urgency=medium

  * SECURITY UPDATE: insufficient ssl certificate validation
    - debian/patches/CVE-2014-3694.patch: fix basic constraints checking in
      libpurple/certificate.c, libpurple/certificate.h,
      libpurple/plugins/ssl/ssl-gnutls.c, libpurple/plugins/ssl/ssl-nss.c.
    - CVE-2014-3694
  * SECURITY UPDATE: denial of service via malformed MXit emoticon response
    - debian/patches/CVE-2014-3695.patch: properly check lengths in
      libpurple/protocols/mxit/markup.c.
    - CVE-2014-3695
  * SECURITY UPDATE: denial of service via malformed Groupwise message
    - debian/patches/CVE-2014-3696.patch: check sizes in
      libpurple/protocols/novell/nmevent.c.
    - CVE-2014-3696
  * SECURITY UPDATE: XMPP information leak
    - debian/patches/CVE-2014-3698.patch: fix leaks in
      libpurple/protocols/jabber/jutil.c.
    - CVE-2014-3698
 -- Marc Deslauriers <email address hidden>   Mon, 27 Oct 2014 11:48:53 -0400
Obsolete in utopic-updates
Obsolete in utopic-security 
pidgin (1:2.10.9-0ubuntu7.1) utopic-security; urgency=medium

  * SECURITY UPDATE: insufficient ssl certificate validation
    - debian/patches/CVE-2014-3694.patch: fix basic constraints checking in
      libpurple/certificate.c, libpurple/certificate.h,
      libpurple/plugins/ssl/ssl-gnutls.c, libpurple/plugins/ssl/ssl-nss.c.
    - CVE-2014-3694
  * SECURITY UPDATE: denial of service via malformed MXit emoticon response
    - debian/patches/CVE-2014-3695.patch: properly check lengths in
      libpurple/protocols/mxit/markup.c.
    - CVE-2014-3695
  * SECURITY UPDATE: denial of service via malformed Groupwise message
    - debian/patches/CVE-2014-3696.patch: check sizes in
      libpurple/protocols/novell/nmevent.c.
    - CVE-2014-3696
  * SECURITY UPDATE: XMPP information leak
    - debian/patches/CVE-2014-3698.patch: fix leaks in
      libpurple/protocols/jabber/jutil.c.
    - CVE-2014-3698
 -- Marc Deslauriers <email address hidden>   Mon, 27 Oct 2014 11:29:40 -0400
Superseded in vivid-release
Obsolete in utopic-release
Deleted in utopic-proposed (Reason: moved to release) 
pidgin (1:2.10.9-0ubuntu7) utopic; urgency=medium

  * Add dialpad support.
 -- Dimitri John Ledkov <email address hidden>   Thu, 18 Sep 2014 18:11:48 +0100
Superseded in utopic-release
Deleted in utopic-proposed (Reason: moved to release) 
pidgin (1:2.10.9-0ubuntu6) utopic; urgency=medium

  * debian/control, debian/rules, debian/prefs.xml:
    Build with --enable-unity. (LP: #1362368)
 -- Tomas Hnyk (sup) <email address hidden>   Tue, 02 Sep 2014 11:37:59 +0200
Superseded in utopic-release
Deleted in utopic-proposed (Reason: moved to release) 
pidgin (1:2.10.9-0ubuntu5) utopic; urgency=medium

  * Rebuild for Perl 5.20.0.
 -- Colin Watson <email address hidden>   Thu, 21 Aug 2014 13:40:17 +0100
Superseded in utopic-release
Deleted in utopic-proposed (Reason: moved to release) 
pidgin (1:2.10.9-0ubuntu4) utopic; urgency=medium

  * SECURITY UPDATE: memory corruption via crafted message from gadu-gadu
    file relay server
    - debian/patches/CVE-2014-3775.patch: check relay_count in
      libpurple/protocols/gg/lib/dcc7.c
    - CVE-2014-3775
  * debian/rules: replace spaces with tabs and remove extra keyword to fix
    FTBFS
 -- Marc Deslauriers <email address hidden>   Tue, 20 May 2014 11:06:01 -0400
Superseded in trusty-updates
Superseded in trusty-security 
pidgin (1:2.10.9-0ubuntu3.1) trusty-security; urgency=medium

  * SECURITY UPDATE: memory corruption via crafted message from gadu-gadu
    file relay server
    - debian/patches/CVE-2014-3775.patch: check relay_count in
      libpurple/protocols/gg/lib/dcc7.c
    - CVE-2014-3775
 -- Marc Deslauriers <email address hidden>   Tue, 20 May 2014 11:08:53 -0400
Superseded in precise-updates
Superseded in precise-security 
pidgin (1:2.10.3-0ubuntu1.5) precise-security; urgency=medium

  * SECURITY UPDATE: memory corruption via crafted message from gadu-gadu
    file relay server
    - debian/patches/CVE-2014-3775.patch: check relay_count in
      libpurple/protocols/gg/lib/dcc7.c
    - CVE-2014-3775
 -- Marc Deslauriers <email address hidden>   Tue, 20 May 2014 11:11:00 -0400
Obsolete in saucy-updates
Obsolete in saucy-security 
pidgin (1:2.10.7-0ubuntu4.1.13.10.2) saucy-security; urgency=medium

  * SECURITY UPDATE: memory corruption via crafted message from gadu-gadu
    file relay server
    - debian/patches/CVE-2014-3775.patch: check relay_count in
      libpurple/protocols/gg/lib/dcc7.c
    - CVE-2014-3775
 -- Marc Deslauriers <email address hidden>   Tue, 20 May 2014 11:09:56 -0400
Superseded in utopic-release
Published in trusty-release
Deleted in trusty-proposed (Reason: moved to release) 
pidgin (1:2.10.9-0ubuntu3) trusty; urgency=medium

  * debian/patches/xmessagingmenu.patch: change the .in file as well
    so the changes are not overwriten when regenerating
 -- Sebastien Bacher <email address hidden>   Wed, 09 Apr 2014 19:00:52 +0200
Superseded in trusty-release
Deleted in trusty-proposed (Reason: moved to release) 
pidgin (1:2.10.9-0ubuntu2) trusty; urgency=medium

  * debian/control: remove libgadu-dev from Build-Depends. Pidgin has been
    using its own libgadu since at least precise, and the useless
    dependency is pulling libgadu into main.
 -- Marc Deslauriers <email address hidden>   Mon, 10 Feb 2014 10:15:42 -0500
Superseded in trusty-release
Superseded in trusty-proposed 
pidgin (1:2.10.9-0ubuntu1) trusty; urgency=medium

  * New upstream version, thanks Jackson Doak (lp: #1275113)
    CVE-2012-6152, CVE-2013-6477, CVE-2013-6478, CVE-2013-6479,
    CVE-2013-6481, CVE-2013-6482, CVE-2013-6483, CVE-2013-6484,
    CVE-2013-6485, CVE-2013-6486, CVE-2013-6487, CVE-2013-6489,
    CVE-2013-6490, CVE-2014-0020.
 -- Sebastien Bacher <email address hidden>   Thu, 06 Feb 2014 16:17:33 +0000
Obsolete in quantal-updates
Obsolete in quantal-security 
pidgin (1:2.10.6-0ubuntu2.3) quantal-security; urgency=medium

  * SECURITY UPDATE: remote crash in yahoo via incorrect char encoding
    - debian/patches/CVE-2012-6152.patch: validate strings as utf-8
      before parsing in libpurple/protocols/yahoo/{libymsg,yahoo_aliases,
      yahoo_filexfer,yahoo_friend,yahoo_picture,yahoochat}.c.
    - CVE-2012-6152
  * SECURITY UPDATE: crash via bad XMPP timestamp
    - debian/patches/CVE-2013-6477.patch: properly handle invalid
      timestamps in libpurple/{conversation,log,server}.c.
    - CVE-2013-6477
  * SECURITY UPDATE: crash via hovering pointer over long URL
    - debian/patches/CVE-2013-6478.patch: set max lengths in
      pidgin/gtkimhtml.c.
    - CVE-2013-6478
  * SECURITY UPDATE: remote crash via HTTP response parsing
    - debian/patches/CVE-2013-6479.patch: don't implicitly trust
      Content-Length in libpurple/util.c.
    - CVE-2013-6479
  * SECURITY UPDATE: remote crash via yahoo P2P message
    - debian/patches/CVE-2013-6481.patch: perform bounds checking in
      libpurple/protocols/yahoo/libymsg.c.
    - CVE-2013-6481
  * SECURITY UPDATE: crashes via MSN NULL pointer dereferences
    - debian/patches/CVE-2013-6482.patch: fix NULL pointers in
      libpurple/protocols/msn/{msg,oim,soap}.c.
    - CVE-2013-6482
  * SECURITY UPDATE: iq reply spoofing via incorrect from verification
    - debian/patches/CVE-2013-6483.patch: verify from field on iq replies
      in libpurple/protocols/jabber/{iq.*,jabber.c,jutil.*}.
    - CVE-2013-6483
  * SECURITY UPDATE: crash via response from STUN server
    - debian/patches/CVE-2013-6484.patch: validate len in libpurple/stun.c.
    - CVE-2013-6484
  * SECURITY UPDATE: buffer overflow in chunked HTTP response parsing
    - debian/patches/CVE-2013-6485.patch: limit chunk size in
      libpurple/util.c.
    - CVE-2013-6485
  * SECURITY UPDATE: buffer overflow in gadu-gadu HTTP parsing
    - debian/patches/CVE-2013-6487.patch: limit length in
      libpurple/protocols/gg/lib/http.c.
    - CVE-2013-6487
  * SECURITY UPDATE: buffer overflow in MXit emoticon parsing
    - debian/patches/CVE-2013-6489.patch: check return code in
      libpurple/protocols/mxit/markup.c.
    - CVE-2013-6489
  * SECURITY UPDATE: buffer overflow in SIMPLE header parsing
    - debian/patches/CVE-2013-6490.patch: use g_new in
      libpurple/protocols/simple/simple.c and check length in
      libpurple/protocols/simple/sipmsg.c.
    - CVE-2013-6490
  * SECURITY UPDATE: crash via IRC argument parsing
    - debian/patches/CVE-2014-0020.patch: fix arg handling in
      libpurple/protocols/irc/msgs.c, fix counts in
      libpurple/protocols/irc/parse.c.
    - CVE-2014-0020
 -- Marc Deslauriers <email address hidden>   Wed, 05 Feb 2014 15:56:07 -0500
Superseded in precise-updates
Superseded in precise-security 
pidgin (1:2.10.3-0ubuntu1.4) precise-security; urgency=medium

  * SECURITY UPDATE: remote crash in yahoo via incorrect char encoding
    - debian/patches/CVE-2012-6152.patch: validate strings as utf-8
      before parsing in libpurple/protocols/yahoo/{libymsg,yahoo_aliases,
      yahoo_filexfer,yahoo_friend,yahoo_picture,yahoochat}.c.
    - CVE-2012-6152
  * SECURITY UPDATE: crash via bad XMPP timestamp
    - debian/patches/CVE-2013-6477.patch: properly handle invalid
      timestamps in libpurple/{conversation,log,server}.c.
    - CVE-2013-6477
  * SECURITY UPDATE: crash via hovering pointer over long URL
    - debian/patches/CVE-2013-6478.patch: set max lengths in
      pidgin/gtkimhtml.c.
    - CVE-2013-6478
  * SECURITY UPDATE: remote crash via HTTP response parsing
    - debian/patches/CVE-2013-6479.patch: don't implicitly trust
      Content-Length in libpurple/util.c.
    - CVE-2013-6479
  * SECURITY UPDATE: remote crash via yahoo P2P message
    - debian/patches/CVE-2013-6481.patch: perform bounds checking in
      libpurple/protocols/yahoo/libymsg.c.
    - CVE-2013-6481
  * SECURITY UPDATE: crashes via MSN NULL pointer dereferences
    - debian/patches/CVE-2013-6482.patch: fix NULL pointers in
      libpurple/protocols/msn/{msg,oim,soap}.c.
    - CVE-2013-6482
  * SECURITY UPDATE: iq reply spoofing via incorrect from verification
    - debian/patches/CVE-2013-6483.patch: verify from field on iq replies
      in libpurple/protocols/jabber/{iq.*,jabber.c,jutil.*}.
    - CVE-2013-6483
  * SECURITY UPDATE: crash via response from STUN server
    - debian/patches/CVE-2013-6484.patch: validate len in libpurple/stun.c.
    - CVE-2013-6484
  * SECURITY UPDATE: buffer overflow in chunked HTTP response parsing
    - debian/patches/CVE-2013-6485.patch: limit chunk size in
      libpurple/util.c.
    - CVE-2013-6485
  * SECURITY UPDATE: buffer overflow in gadu-gadu HTTP parsing
    - debian/patches/CVE-2013-6487.patch: limit length in
      libpurple/protocols/gg/lib/http.c.
    - CVE-2013-6487
  * SECURITY UPDATE: buffer overflow in MXit emoticon parsing
    - debian/patches/CVE-2013-6489.patch: check return code in
      libpurple/protocols/mxit/markup.c.
    - CVE-2013-6489
  * SECURITY UPDATE: buffer overflow in SIMPLE header parsing
    - debian/patches/CVE-2013-6490.patch: use g_new in
      libpurple/protocols/simple/simple.c and check length in
      libpurple/protocols/simple/sipmsg.c.
    - CVE-2013-6490
  * SECURITY UPDATE: crash via IRC argument parsing
    - debian/patches/CVE-2014-0020.patch: fix arg handling in
      libpurple/protocols/irc/msgs.c, fix counts in
      libpurple/protocols/irc/parse.c.
    - CVE-2014-0020
 -- Marc Deslauriers <email address hidden>   Wed, 05 Feb 2014 15:58:24 -0500
Superseded in saucy-updates
Superseded in saucy-security 
pidgin (1:2.10.7-0ubuntu4.1.13.10.1) saucy-security; urgency=medium

  * SECURITY UPDATE: remote crash in yahoo via incorrect char encoding
    - debian/patches/CVE-2012-6152.patch: validate strings as utf-8
      before parsing in libpurple/protocols/yahoo/{libymsg,yahoo_aliases,
      yahoo_filexfer,yahoo_friend,yahoo_picture,yahoochat}.c.
    - CVE-2012-6152
  * SECURITY UPDATE: crash via bad XMPP timestamp
    - debian/patches/CVE-2013-6477.patch: properly handle invalid
      timestamps in libpurple/{conversation,log,server}.c.
    - CVE-2013-6477
  * SECURITY UPDATE: crash via hovering pointer over long URL
    - debian/patches/CVE-2013-6478.patch: set max lengths in
      pidgin/gtkimhtml.c.
    - CVE-2013-6478
  * SECURITY UPDATE: remote crash via HTTP response parsing
    - debian/patches/CVE-2013-6479.patch: don't implicitly trust
      Content-Length in libpurple/util.c.
    - CVE-2013-6479
  * SECURITY UPDATE: remote crash via yahoo P2P message
    - debian/patches/CVE-2013-6481.patch: perform bounds checking in
      libpurple/protocols/yahoo/libymsg.c.
    - CVE-2013-6481
  * SECURITY UPDATE: crashes via MSN NULL pointer dereferences
    - debian/patches/CVE-2013-6482.patch: fix NULL pointers in
      libpurple/protocols/msn/{msg,oim,soap}.c.
    - CVE-2013-6482
  * SECURITY UPDATE: iq reply spoofing via incorrect from verification
    - debian/patches/CVE-2013-6483.patch: verify from field on iq replies
      in libpurple/protocols/jabber/{iq.*,jabber.c,jutil.*}.
    - CVE-2013-6483
  * SECURITY UPDATE: crash via response from STUN server
    - debian/patches/CVE-2013-6484.patch: validate len in libpurple/stun.c.
    - CVE-2013-6484
  * SECURITY UPDATE: buffer overflow in chunked HTTP response parsing
    - debian/patches/CVE-2013-6485.patch: limit chunk size in
      libpurple/util.c.
    - CVE-2013-6485
  * SECURITY UPDATE: buffer overflow in gadu-gadu HTTP parsing
    - debian/patches/CVE-2013-6487.patch: limit length in
      libpurple/protocols/gg/lib/http.c.
    - CVE-2013-6487
  * SECURITY UPDATE: buffer overflow in MXit emoticon parsing
    - debian/patches/CVE-2013-6489.patch: check return code in
      libpurple/protocols/mxit/markup.c.
    - CVE-2013-6489
  * SECURITY UPDATE: buffer overflow in SIMPLE header parsing
    - debian/patches/CVE-2013-6490.patch: use g_new in
      libpurple/protocols/simple/simple.c and check length in
      libpurple/protocols/simple/sipmsg.c.
    - CVE-2013-6490
  * SECURITY UPDATE: crash via IRC argument parsing
    - debian/patches/CVE-2014-0020.patch: fix arg handling in
      libpurple/protocols/irc/msgs.c, fix counts in
      libpurple/protocols/irc/parse.c.
    - CVE-2014-0020
 -- Marc Deslauriers <email address hidden>   Wed, 05 Feb 2014 15:08:01 -0500
Superseded in trusty-release
Deleted in trusty-proposed (Reason: moved to release) 
pidgin (1:2.10.7-0ubuntu4.2) trusty; urgency=low

  * Rebuild for Perl 5.18.
 -- Colin Watson <email address hidden>   Tue, 22 Oct 2013 12:18:43 +0100
Superseded in trusty-release
Obsolete in saucy-release
Obsolete in raring-release
Deleted in raring-proposed (Reason: moved to release) 
pidgin (1:2.10.7-0ubuntu4.1) raring-proposed; urgency=low

  * Add hg-remove-SIGCHLD-handler.patch: Fix hanging on startup.
    Backport of upstream commit from 3.0 (LP: #1108056)
 -- Robert Hooker <email address hidden>   Sat, 20 Apr 2013 15:40:16 -0400
Superseded in raring-release
Deleted in raring-proposed (Reason: moved to release) 
pidgin (1:2.10.7-0ubuntu4) raring; urgency=low

  * Specified multiarch Tcl location, fixing FTBFS.
 -- Daniel T Chen <email address hidden>   Tue, 02 Apr 2013 17:31:12 -0400
1 → 75 of 228 results First • Previous • • Last