Pidgin (formerly Gaim) is an all-in-one IM client that resembles AIM. Gaim lets you use AIM, ICQ, Yahoo, MSN, IRC, Jabber, Zephyr, and Gadu-Gadu all at once. It is not endorsed by or affiliated with AOL, Yahoo, or MSN.
- General ?Check the basic constraints extension when validating SSL/TLS certificates. This fixes a security hole that allowed a malicious man-in-the-middle to impersonate an IM server or any other https endpoint. This affected both the NSS and GnuTLS plugi
- ?Allow and prefer TLS 1.2 and 1.1 when using the NSS plugin for SSL. (Elrond and Ashish Gupta) (#15909)
- •libpurple3 compatibility ?Encrypted account passwords are preserved until the new one is set
- ?Fix loading Google Talk and Facebook XMPP accounts
- •Windows-Specific Changes ?Don't allow overwriting arbitrary files on the file system when the user installs a smiley theme via drag-and-drop. (Discovered by Yves Younan of Cisco Talos) (CVE-2014-3697)
- ?Updates to dependencies ?NSS 3.17.1 and NSPR 4.10.7
- •Finch ?Fix build against Python 3. (Ed Catmur) (#15969)
- •Gadu-Gadu ?Updated internal libgadu to version 1.12.0
- •Groupwise ?Fix potential remote crash parsing server message that indicates that a large amount of memory should be allocated. (Discovered by Yves Younan and Richard Johnson of Cisco Talos) (CVE-2014-3696)
- •IRC ?Fix a possible leak of unencrypted data when using /me command with OTR. (Thijs Alkemade) (#15750)
- •MXit ?Fix potential remote crash parsing a malformed emoticon response. (Discovered by Yves Younan and Richard Johnson of Cisco Talos) (CVE-2014-3695)
- •XMPP ?Fix potential information leak where a malicious XMPP server and possibly even a malicious remote user could create a carefully crafted XMPP message that causes libpurple to send an XMPP message containing arbitrary memory. (Discovered and fixed by
- ?Fix Facebook XMPP roster quirks. (#15041, #15957)
- •Yahoo ?Fix login when using the GnuTLS library for TLS connections. (#16172)
Reviewing 2.10.5 (Jul 6, 2012)
Pretty good. No adware here, simple interface, easy to use.
-1 because when I give anyone in my contact list nicknames, then next time I run the program, those names weren't saved... it reverts back to whatever it picks up.
Reviewing 2.10.3 (Mar 27, 2012)
Great messenger, the amounts of ads on MSN Live is getting stupid, using this is so much better. I also use the Unix version which works well.
Reviewing 2.10.0 (Aug 22, 2011)
Great IM no adds used it for years Is there a updated toaster that works with later builds
Reviewing 2.7.5 (Nov 2, 2010)
Totally legit yo. Installed this and I was achatting it up with my homies and hos and it was all funk. Try it out and get it on muchachos
Reviewing 2.7.4 (Oct 22, 2010)
I'm not so sure not compared to trillian astra it lacks in all ways
No comments yet