Re: update chat/pidgin

["Steven M. Bellovin" <smb%cs.columbia.edu@localhost>]

On Fri, 11 Jul 2008 09:09:12 +0200
Tobias Nygren <tnn%NetBSD.org@localhost> wrote:

> On Wed, 9 Jul 2008 17:01:55 -0400
> "Steven M. Bellovin" <smb%cs.columbia.edu@localhost> wrote:
> 
> > On Wed, 09 Jul 2008 23:55:32 +0300
> > Aleksey Cheusov <cheusov%tut.by@localhost> wrote:
> > 
> > >  >> Packaged version of chat/pidgin just doesn't work.
> > >  >> It says "Your version is too old..." and blablabla.
> > >  >> 
> > > 
> > > > I'm surprised you're having trouble -- I'm not.  Perhaps one
> > > > specific protocol?  I use jabber (to a private jabber server)
> > > > and AIM.
> > > 
> > > I forgot to mention that all this is about ICQ.
> > 
> > Ah -- that certainly explains why I didn't see the problem.
> > > 
> > > > As for upgrading -- I believe we're still in the middle of
> > > > pkgsrc freeze, so the update can't happen immediately.  But the
> > > > freeze should end soon.
> > > Ok. But in this case pidgin/icq will not work in 2008Q2.
> > > 
> > I'm not involved in the pkgsrc release process, so I have no
> > visibility into what they're up to.  Based on the timing, though, I
> > suspect that it's just too close to ready to go to make such a
> > change.  I'll let the pkgsrc maintainers answer that one.
> 
> I'll do this update today. It will also fix a security issue.
> 
Thanks.  I note that the pkg-vulnerabilities file flags all versions of
pidgin -- does 2.4.3 resolve the security issue?


                --Steve Bellovin, http://www.cs.columbia.edu/~smb