-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 The “unattainably high curry standards” release.
tarball: http://telepathy.freedesktop.org/releases/telepathy-gabble/telepathy-gabble-0.17.4.tar.gz signature: http://telepathy.freedesktop.org/releases/telepathy-gabble/telepathy-gabble-0.17.4.tar.gz.asc git: http://cgit.freedesktop.org/telepathy/telepathy-gabble This development release fixes the same man-in-the-middle attack as 0.16.6. If you use an unencrypted connection to a "legacy Jabber" (pre-XMPP) server, this version of Gabble will not connect until you make one of these configuration changes: • upgrade the server software to something that supports XMPP 1.0; or • use an encrypted "old SSL" connection, typically on port 5223 (old-ssl); or • turn off "Encryption required (TLS/SSL)" (require-encryption) Fixes: • update Wocky: · fd.o #61792: fix linking an example program with ld versions that default to --no-copy-dt-needed-entries · fd.o #65036 (CVE-2013-1431): update Wocky to respect the tls-required flag on legacy Jabber servers • fd.o #63119: improve regression tests' isolation from the session bus (Simon) • fd.o #64319: consider the <URL> field to be "supported" on Google servers (it's currently read-only and contains a Google+ URL) (Xavier) • fd.o #64354: don't claim we support X-TELEPATHY-PASSWORD if we don't know the username (Xavier) -----BEGIN PGP SIGNATURE----- iQIVAwUBUad5L03o/ypjx8yQAQgZyQ/+P1MCeamSKlwrUQGjUQiDHDRI7ZnNUpBV p7EimW3CIq52F7xlZCNeRKBWGttqYgB4jgtxn9n5lxfuZLyyGw2e7EQQtBbPVkGu pzuXWmo+pdIBq26oq6KgoEygTPfVTMJZ+EASDFgsTmA2bQqN8Rap29pw3Fbx1zHY BEaA6ENfMNnLkPzmLBAk7os2UnpKkjdmWT/xLhJe8oxOXRXZVuyVxvuIp933Thuk YLpg0rO77zB5PWwj9lkViG8QsAdgZyRyKTcvEjdU1YE9vrqe51AstKyvUCQEMX4B a3H+ixOGTRnHAXEstovRDzyLVsjjX5dw50ukvA4cFv1FHir6w+3VSMR1Nf0TYuP3 4Jhodb4QdUDA9c5vkdwWP9k5L2/E772MhAH9udqdpaM8uKL0+X/XgfriPsl5Fe9o qE2GknPZ9adICgJiIQ6qmyJaubvax05lULMYudXFpBrKPNd9iEXJhrTEo4FieeJu fvebsgt4BhT7dvmYsIswqC1yWWzhjzLW0rjHmZt9X8iWj13QqcCNrpTgSCj/gpo9 SNqypEC7BmFGnO5iVFapHqHtK0vV0hSBDz7QdAi2FYFQvlXmVSacLozI1tgf9ncH I5Ji5aYA1tHmMvimrOZeHvIDJNpXg1hihJW3X0dmpWA53MVdz0+0Nnvm800E/SYk I4Jh3UssiPE= =jluK -----END PGP SIGNATURE----- _______________________________________________ telepathy mailing list [email protected] http://lists.freedesktop.org/mailman/listinfo/telepathy
