Branches for Jaunty

Author: Iain Lane
Revision Date: 2009-06-25 13:27:48 UTC

* debian/patches/50_yahoo_16_auth.patch: Add patch backported from upstream
  version 2.5.7 to fix connection problems connection to Yahoo! instant
  messenger. Previous versions of pidgin were using an old authentication
  method which was disabled by Yahoo!. This patch switches to using the new
  authentication method, version 16. (LP: #389322) References:
  - http://theflamingbanker.blogspot.com/2009/06/some-clarification-on-yahoo-issues.html
  - http://developer.pidgin.im/ticket/8853

Author: Sebastien Bacher
Revision Date: 2009-04-09 18:12:03 UTC

* debian/patches/72_upstream_change_fix_jabber_crasher.patch:
  - upstream change to fix crash on jabber when using a custom image
    (lp: #357949)

Author: Marc Deslauriers
Revision Date: 2010-02-18 14:37:45 UTC

* SECURITY UPDATE: denial of service via malformed SLP message
  - debian/patches/85_security_CVE-2010-0277.patch: validate input in
    libpurple/protocols/msn/{slp.c,slpcall.c,slplink.c,slpmsg.h}.
  - CVE-2010-0277
* SECURITY UPDATE: denial of service via certain nicknames in Finch
  - debian/patches/86_security_CVE-2010-0420.patch: properly unescape
    text in finch/libgnt/gnttree.c, libpurple/protocols/bonjour/parser.c,
    libpurple/protocols/jabber/parser.c, libpurple/xmlnode.c.
  - CVE-2010-0420
* SECURITY UPDATE: denial of service via large number of smileys
  - debian/patches/87_security_CVE-2010-0423.patch: limit the number of
    smileys in pidgin/gtkimhtml.c.
  - CVE-2010-0423

Author: Marc Deslauriers
Revision Date: 2010-02-18 14:37:45 UTC

* SECURITY UPDATE: denial of service via malformed SLP message
  - debian/patches/85_security_CVE-2010-0277.patch: validate input in
    libpurple/protocols/msn/{slp.c,slpcall.c,slplink.c,slpmsg.h}.
  - CVE-2010-0277
* SECURITY UPDATE: denial of service via certain nicknames in Finch
  - debian/patches/86_security_CVE-2010-0420.patch: properly unescape
    text in finch/libgnt/gnttree.c, libpurple/protocols/bonjour/parser.c,
    libpurple/protocols/jabber/parser.c, libpurple/xmlnode.c.
  - CVE-2010-0420
* SECURITY UPDATE: denial of service via large number of smileys
  - debian/patches/87_security_CVE-2010-0423.patch: limit the number of
    smileys in pidgin/gtkimhtml.c.
  - CVE-2010-0423