Gaim - (Open Source)
Chatting with friends on AOL Instant Messenger, talking to a friend on Yahoo Messenger and stay on an IRC channel at the same time is possible when using Pidgin software.
Pidgin is an email client that allows to chat with MSN, Google Talk, AIM, ICQ and other contacts, from a single interface. Available in several languages, this software offers convenient features to comfortably talk.
Pidgin software brings together in a single window the AIM, ICQ, Google Talk, Jabber / XMPP, MSN Messenger, Yahoo!, Bonjour, Gadu- Gadu, IRC, Lotus Sametime, SILC, SIMPLE, MXit, MySpaceIM and Zephyr contacts.
The application gives the ability to chat with multiple contacts at once even if they come from different networks discussion. It is even possible to make a conference if necessary.
Even if the icons of contacts for each account are already marked by their respective icons, it does not prevent the user to create customized friends, relatives, colleagues categories, etc.
Pidgin offers several smileys to liven up the discussion. As the software supports adding plugins, user can also download more smileys on the Internet to enrich the library.
* General
- Python build scripts and example plugins are now compatible with Python 3.
* libpurple
- Fix potential crash if libpurple gets an error attempting to read a reply from a STUN server.
- Fix potential crash parsing a malformed HTTP response.
- Fix buffer overflow when parsing a malformed HTTP response with chunked Transfer-Encoding.
- Better handling of HTTP proxy responses with negative Content-Lengths.
- Fix handling of SSL certificates without subjects when using libnss.
- Fix handling of SSL certificates with timestamps in the distant future when using libnss.
- Impose maximum download size for all HTTP fetches.
* Pidgin
- Fix crash displaying tooltip of long URLs.
- Better handling of URLs longer than 1000 letters.
- Fix handling of multibyte UTF-8 characters in smiley themes.
* Windows-Specific Changes
- When clicking file:// links, show the file in Explorer rather than attempting to run the file. This reduces the chances of a user clicking on a link and mistakenly running a malicious file.
- Fix Tcl scripts.
- Fix crash-on-startup when ASLR is always on.
- Updates to dependencies:
> NSS 3.15.4 and NSPR 4.10.2
> Pango 1.29.4-1daa.
* AIM
- Fix untrusted certificate error.
* AIM and ICQ
- Fix a possible crash when receiving a malformed message in a Direct IM session.
* Gadu-Gadu
- Fix buffer overflow with remote code execution potential. Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
- Disabled buddy list import/export from/to server (it didn't work anymore). Buddy list synchronization will be implemented in 3.0.0.
- Disabled new account registration and password change options, as it didn't work either. Account registration also caused a crash. Both functions are available using official Gadu-Gadu website.
* IRC
- Fix bug where a malicious server or man-in-the-middle could trigger a crash by not sending enough arguments with various messages.
- Fix bug where initial IRC status would not be set correctly.
- Fix bug where IRC wasn't available when libpurple was compiled with Cyrus SASL support.
* MSN
- Fix NULL pointer dereference parsing headers in MSN.
- Fix NULL pointer dereference parsing OIM data in MSN.
- Fix NULL pointer dereference parsing SOAP data in MSN.
- Fix possible crash when sending very long messages. Not remotely-triggerable.
* MXit
- Fix buffer overflow with remote code execution potential.
- Fix sporadic crashes that can happen after user is disconnected.
- Fix crash when attempting to add a contact via search results.
- Show error message if file transfer fails.
- Fix compiling with InstantBird.
- Fix display of some custom emoticons.
* SILC
- Correctly set whiteboard dimensions in whiteboard sessions.
* SIMPLE
- Fix buffer overflow with remote code execution potential.
* XMPP
- Prevent spoofing of iq replies by verifying that the 'from' address matches the 'to' address of the iq request.
- Fix crash on some systems when receiving fake delay timestamps with extreme values.
- Fix possible crash or other erratic behavior when selecting a very small file for your own buddy icon.
- Fix crash if the user tries to initiate a voice/video session with a resourceless JID.
- Fix login errors when the first two available auth mechanisms fail but a subsequent mechanism would otherwise work when using Cyrus SASL.
- Fix dropping incoming stanzas on BOSH connections when we receive multiple HTTP responses at once.
* Yahoo!
- Fix possible crashes handling incoming strings that are not UTF-8.
- Fix a bug reading a peer to peer message where a remote user could trigger a crash.
* Plugins
- Fix crash in contact availability plugin.
- Fix perl function Purple::Network::ip_atoi
- Add Ubuntu Unity UI integration plugin.