Pidgin 2.10.10 released

Pidgin 2.10.10 recently released, is a chat program which lets you log into accounts on multiple chat networks simultaneously. This means that you can be chatting with friends on MSN, talking to a friend on Google Talk, and sitting in a Yahoo chat room all at the same time. Pidgin runs on Windows, Linux, and other UNIX operating systems, and  it’s compatible with the following chat networks out of the box: AIM, ICQ, Google Talk, Jabber/XMPP, MSN Messenger, Yahoo!, Bonjour, Gadu-Gadu, IRC, Novell GroupWise Messenger, Lotus Sametime, SILC, SIMPLE, MXit, MySpaceIM, and Zephyr.




Pidgin 2.10.10 update

  • General
    • Check the basic constraints extension when validating SSL/TLS certificates. This fixes a security hole that allowed a malicious man-in-the-middle to impersonate an IM server or any other https endpoint. This affected both the NSS and GnuTLS plugins
    • Allow and prefer TLS 1.2 and 1.1 when using the NSS plugin for SSL
  • Yahoo
    • Fix login when using the GnuTLS library for TLS connections
  • IRC
    • Fix a possible leak of unencrypted data when using /me command with OTR
  • MXit
    • Fix potential remote crash parsing a malformed emoticon response
  • XMPP
    • Fix potential information leak where a malicious XMPP server and possibly even a malicious remote user could create a carefully crafted XMPP message that causes libpurple to send an XMPP message containing arbitrary memory
    • Fix Facebook XMPP roster quirks
  • Install Pidgin 2.10.10 on Ubuntu 14.04 & Ubuntu 14.10

    sudo apt-get update
    sudo apt-get build-dep pidgin
    wget -O pidgin-2.10.10.tar.bz2
    tar -xjvf pidgin-2.10.10.tar.bz2
    cd pidgin-2.10.10/
    sudo make install
    comments powered by Disqus