Opened 7 weeks ago

Closed 2 weeks ago

#14976 closed enhancement (fixed)

pidgin-2.14.4

Reported by: Douglas R. Reno Owned by: Douglas R. Reno
Priority: normal Milestone: 10.2
Component: BOOK Version: git
Severity: normal Keywords:
Cc:

Description

New point version

Change History (4)

comment:1 by Douglas R. Reno, 6 weeks ago

Owner: changed from blfs-book to Douglas R. Reno
Status: newassigned

comment:2 by Douglas R. Reno, 2 weeks ago

2.14.4

Another minor version of Pidgin has been released, 2.14.4. It has been many years since we were able to get three releases out to our users in such a short amount of time (less than a month!), something that we are certainly very happy to see and hope you are as well.

The complete changelog for this release is the following:

General:

    Use LT_LIB_M to find the math library. This should simplify things for various distros including the BSD’s. (Review 608) (and, Justin Lechner)

libpurple:

    Removed a dangling reference to oscar that was causing the unit tests to fail. (Review 605) (Gary Kramlich)
    Update purple-remote and purple-url-handler to have a Python 3 shebang. (Review 609) (Richard Laager)

Pidgin:

    Install our AppData file into the $prefix/share/metainfo. (Review 607) (Lars Wendler)
    Re-enable the Gevolution plugin and set the evolution-data-server requirement to >= 3.6. (Review 610) (Ed Catmur, Lars Wendler)

Windows-Specific Changes:

    Output pkg-config files so that our Windows builds can be seen by meson. Grim owes a blog post on how this works. (Review 615) (Gary Kramlich)
    Update the debug symbols download in the installer to the inetc plugin. (Review 627) (Gary Kramlich)
    Make sure the uninstaller removes all files that we install. (Review 612) (Gary Kramlich)

comment:3 by Douglas R. Reno, 2 weeks ago

2.14.5

Whoops we missed May, but hopefully you all enjoy this kind of rushed release!

Why was it rushed? Well a certain unnamed broker of software vulnerabilities posted a bounty for vulnerabilities in Pidgin. Thus we quickly ran a bunch of static analysis tools and patched everything we could find.

We have no reason to believe that 2.14.5 is any safer than 2.14.4 as the issues the static analysis found should not be exploitable. However, we didn’t want to take a chance and leave them in.

We also changed the default value of the Enable automatic router port forwarding preference from on to off. We suggest you disable this setting as well if you’re upgrading and you don’t typically send files directly to other users.

For the first time in a long time we updated our bundled TLS Certificates. This should hopefully avoid some certificate warnings for some users but there’s a good chance some third party protocol plugins users might still see them.

Finally, with all the events regarding the Freenode and Libera IRC networks, we decided to change the default IRC server from irc.freenode.net to irc.libera.chat. We will maintain a presence on both networks for as long as we have users there.

The complete changelog for this release is the following:

General:

    Updated our bundled certificates to the latest version from Mozilla. (Review 722) (PIDGIN-17535) (Gary Kramlich)
    Made the project scan-build clean. (Review 692, Review 693, Review 694, Review 695, Review 696, Review 697, Review 698. Review 699, Review 700, Review 701, Review 702, Review 703, Review 704, Review 705, Review 707, Review 708, Review 709, Review 710, Review 711, Review 712, Review 713, Review 714, Review 716, Review 717, Review 718, Review 719) (Gary Kramlich)
    Fixed some of Gary’s scan-build fixes that were a bit verbose. (Review 715) (Elliott Sales de Andrade)
    Disabled UPnP and NAT-PMP by default for new user. (Review 706) (Gary Kramlich)

IRC:

    Changed the default server to irc.libera.chat. (Review 675) (Gary Kramlich)

Windows Specific Changes:

    Fixed the installer not running when Mandatory ASLR was turned on. (Review 721) (PIDGIN-17524) (Gary Kramlich)

comment:4 by Douglas R. Reno, 2 weeks ago

Resolution: fixed
Status: assignedclosed
Note: See TracTickets for help on using tickets.