Anzeigen der neuesten Beiträge
0 Mitglieder und 4 Gäste betrachten dieses Thema.
Security Fixes and rewards:Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.Congratulations to Timothy D. Morgan on receiving a Chromium Security Reward for bug 32718. Note that Timothy elected to donate the reward to the Haiti relief effort, so Google raised the donation to $1337. * [12303] [29914] Low DNS and fall-back behavior of proxies. Credit to Eric Roman of the Chromium development community and Christopher Eatinger. * [31009] High Integer overflows in the v8 engine. Credit to Mark Dowd, under contract to Google Chrome Security Team. * [31692] High Error processing tag. Credit to Google Chrome Security Team (SkyLined). * [32309] Medium Leak of redirection target via <iframe> href. * [$500] [32718] Medium Domain confusion populating HTTP authentication dialog. Credit to Timothy D. Morgan of VSR (www.vsecurity.com). * [32915] High Integer overflow deserializing sandbox message. Credit to Mark Dowd, under contract to Google Chrome Security Team.
version 2.6.6 (02/18/2010) * libpurple o Fix 'make check' on OS X. (David Fang) o Fix a quirk in purple_markup_html_to_xhtml that caused some messages to be improperly converted to XHTML. o Set "controlling-mode" correctly when initializing a media session. Fixes receiving voice calls from Psi. o When looking up DNS records, use the type of record returned by the server (instead of the type we asked for) to determine how to process the record. o Fix an issue with parsing XML attributes that contain "<br>". See ChangeLog.API for more details. * General o Correctly disable all missing dependencies when using the --disable-missing-dependencies option. (Gabriel Schulhof) * Gadu-Gadu o Fix display of avatars after a server-side change. (Krzysztof Klinikowski) * AIM o Allow setting and displaying icons between 1x1 and 100x100 pixels. Previously only icons between 48x48 and 50x50 were allowed. * MSN o Fix CVE-2010-0277, a possible remote crash when parsing an incoming SLP message. (Discovered by Fabian Yamaguchi) o File transfer requests will no longer cause a crash if you delete the file before the other side accepts. o Received files will no longer hold an extra lock after completion, meaning they can be moved or deleted without complaints from your OS. o Buddies who sign in from a second location will no longer cause an unnecessary chat window to open. o Support setting an animated GIF as a buddy icon. o Numerous code cleanups and memory savings. * MySpace o Fix a leak and crash when retrieving buddy icons. * XMPP o Less likely to send messages to a contact's idle/inactive resource. Previously, if a message was received from a specific resource, responses would be sent to that resource until either it went offline or a message is received from another resource. Now, messages are sent to the bare JID upon receipt of any presence change from the contact. o Added support for the SCRAM-SHA-1 SASL mechanism. This is only available when built without Cyrus SASL support. o When getting info on a domain-only (server) JID, show uptime (when given by the result of the "last query") and don't show status as offline. o Fix getting info on your own JID. o Wrap XHTML messages in <p>, as described in XEP-0071, for compatibility with some clients. o Don't do an SRV lookup for a STUN server associated with the account if one is already set globally in prefs. o Don't send custom smileys larger than the recommended maximum object size specified in the BoB XEP. This prevents a client from being disconnected by servers that dislike overly-large stanzas. o Fix receiving messages without markup over an Openfire BOSH connection (forcibly put the stanzas in the jabber:client namespace). o The default value for the file transfer proxies is automatically updated when an account connects, if it is still the old (broken) default (from 'proxy.jabber.org' to 'proxy.eu.jabber.org'). o Fix an issue where libpurple created duplicate buddies if the roster contains a buddy in two groups that differ only by case (e.g. "XMPP" and "xmpp") (or not at all). * Yahoo o Don't send <span> and </span> tags. (Fartash Faghri) o Support PingBox. PingBoxes will appear as pbx/PingBoxName. (Kartik Mohta) * Pidgin o Fix CVE-2010-0423, a denial of service attack due to the parsing of large numbers of smileys. (Discovered by Antti Hayrynen) o Correctly size conversation and status box entries when the interior-focus style property is diabled. (Gabriel Schulhof) o Correctly handle a multiline text field being required in a request form. (Thanks to Florian Zeitz for finding this problem) o Search friends by email-addresses in the buddy list. (Luoh Ren-Shan) o Allow dropping an image on Custom Smiley window to add a new one. o Prompt for confirmation when clearing a whiteboard (doodle) session. (Kartik Mohta) o Use the "hand" cursor when hovering over usernames in chat history to indicate that the username is an actionable item. o Double-clicking usernames in chat history will open an IM with that user. o Put an icon on the "Filter" button in the debug window. o Don't treat "/messages/like/this " as commands. o Explicitly mark user interaction when inserting smilies from the toolbar so "Undo" correctly removes these smilies. o Clicking "New" or "Saved" in the status selector menu while typing a status message no longer keeps the status entry area stuck in "typing" mode forever. o Show tooltips for ellipsized conversation tabs. On older systems, tooltips will show for all tabs. o The File Transfers and Debug Window windows are no longer created as dialogs. These windows should now have minimize buttons in many environments in which they were previously missing (including Windows). o Smiley themes with Windows line endings no longer cause theme descriptions not to be displayed in the theme selector. * Finch o Fix CVE-2010-0420, a possible remote crash when handling chat room buddy names. o Rebindable 'move-first' and 'move-last' actions for tree widgets. So it is possible to jump to the first or last entry in the buddy list (and other such lists) by pressing home or end key (defaults) respectively.
Autor
Thema: Portable Software und Tools für USB-Sticks (Gelesen 1013330 mal)
