Pidgin 2.5.9, 2.6.0, 2.6.1

[John Bailey]

Mark Doliner wrote:
> 2.6.1: This is 2.6.0 with an important security fix and some fixed
> compilation problems.  Please use this and never 2.6.0!

For reference, the security issue was that a remote user could send a URL over
Yahoo and crash a running Pidgin.  Neither Mark nor I could reproduce this
ourselves, but the user experiencing it was able to provide us a good backtrace
and test the patch for us.  It was already public on our trac before Mark fixed
the issue (http://developer.pidgin.im/ticket/9946).

> See http://developer.pidgin.im/wiki/ChangeLog for details.  Also, as
> of 2.6.0 we now require glib and gtk+ 2.4.0 or newer.  tarballs for
> all releases are online and it's likely that an amazing human being
> will build a Windows package for 2.6.1 within the next 48 hours.

The change to a minimum requirement of GTK+ and GLib 2.4.0 was not intentional;
Stu discovered the issues when building against older libraries and concluded
that while we could probably fix most of the issues pretty easily, there were
several places where it would prove unreasonably difficult to do so.  It seemed
more sensible to just increase the minimum version requirements.

John

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 835 bytes
Desc: OpenPGP digital signature
URL: <http://pidgin.im/cgi-bin/mailman/private/packagers/attachments/20090819/0808a77e/attachment.pgp>