Pidgin 2.13.0

* General
- Build fixes on OpenSolaris. (Brian Lu)
- Add configure option --enable-trayicon-compat which installs tray icons into directories that are compatible with older versions of hicolor-icon-theme (0.9).

* Pidgin
- Restore the tray icon's blinking functionality.
- Fix a crash setting moods when an account is disconnected.

* Bonjour
- Fix a crash on disconnect.

* ICQ
- Fix bug that caused HTML to be displayed in incoming messages.

* MSN
- Fix unnecessary bandwidth consumption for buddy icon requests when buddies have capital letters in their passport addresses.
- Support for direct connections, enabling faster file transfers, smiley and buddy icon loading. (Gábor Szuromi)

* XMPP
- Allow connecting to servers that advertise EXTERNAL (broken in 2.7.0)

* MXit
- Replace the MXit-specific mood management with the new standard Moods API.
- Add the standard MXit emoticons.
- Improve the handling of users being kicked from MultiMX rooms.
- MXit doesn't allow you to see your buddy's Email Address or Title, so remove those two fields from the "Buddy Information" page.
- Show buddy's Registration Country in their profile.
- Increment protocol version to v6.0
- If an invite you sent was rejected with a reason, display that message in the buddy tooltip.
- CAPTCHA value is a required field during account activation. (Resolves issue on Maemo)
- When your avatar image is changed, don't forget the user's profile information.

* Windows-Specific Changes
- Fix a regression introduced in 2.7.0 that caused Window Flashing not to work.

* General
- Changed GTK+ minimum version requirement to 2.10.0.
- Changed GLib minimum version requirement to 2.12.0.
- Using the --disable-nls argument to configure now works properly. You will no longer be forced to have intltool to configure and build.
- Fix two related crashes in the GnuTLS and NSS plugins when they suffer internal errors immediately upon attempting to establish an SSL connection.
- Fix NSS to work when reinitialized after being used. (Thanks to Ludovico Cavedon for the testcase)
- Added support for PURPLE_GNUTLS_PRIORITIES environment variable. This can be used to specify GnuTLS priorities on a per-host basis. The format is "host=priority;host2=priority;...". The default priority can be overridden by using "*" as the host. See the GnuTLS manual for documentation on the format of the priority strings.
- Fix autoconf detection of Python. (Brad Smith)
- Fix a crash when a Windows proxy (from IE) does not have a port. (Marten Klencke)

* Pidgin
- Moved the "Debugging Information" section of the About box to a "Build Information" dialog accessible on the Help menu.
- Moved the Developer and Crazy Patch Writer information from the About box to a "Developer Information" dialog accessible on the Help menu.
- Moved the Translator information from the About box to a "Translator Information" dialog accessible on the Help menu.
- Use G!tkStatusIcon for the docklet, providing better integration in notification area.
- Added UI for sending attentions (buzz, nudge) on supporting protocols.
- Make the search dialog unobtrusive in the conversation window (by making it look and behave like the search dialog in Firefox)
- The Recent Log Activity sort method for the Buddy List now distinguishes between no activity and a small amount of activity in the distant past. (Greg McNew)
- Added a menu set mood globally for all mood-supporting accounts (currently XMPP and ICQ).
- Default binding of Ctrl+Shift+v to 'Paste as Plain Text' in conversation windows. This can be changed in .gtkrc-2.0. For example, Ctrl+v can be bound to 'Paste as Plain Text' by default.
- Plugins can now handle markup in buddy names by attaching to the "drawing-buddy" signal. (Daniele Ricci, Andrea Piccinelli)
- Be more accommodating when scaling down large images for use as buddy icons.
- The 'Message Timestamp Formats' plugin allows changing the timestamp format from the timestamps' context menu in conversation log.
- The 'Message Timestamp Formats' plugin allows forcing 12-hour timestamps. (Jonathan Maltz)
- Fix pastes from Chrome (rich-text pastes and probably URLs having garbage appended to them).
- Show file transfer thumbnails for images on supporting protocols (currently only supported on MSN).

* Bonjour
- Added support for IPv6. (Thanks to T_X for testing)

* Gadu-Gadu
- Updated our bundled libgadu to 1.9.0-rc2 (many thanks to Krzysztof Klinikowski for the work and testing put in here!)
- Minimum requirement for external libgadu is now also 1.9.0-rc2.

* AIM and ICQ
- X-Status (Custom ICQ status icon) support. Since most of the icons available reflect moods, this is labeled "Set Mood" on the Accounts->ICQ Account menu. (Andrew Ivanov, Tomáš Kebert, Yuriy Yevgrafov, and trac users bob007, salieff, and nops)
- Allow setting and displaying icons between 1x1 and 100x100 pixels for ICQ. Previously only icons between 48x48 and 52x64 were allowed.
- When using the clientLogin authentication method, prompt for a password on reconnect when "Remember Password" is not checked and authentication fails due to an incorrect password. (This is the same behavior as the legacy authentication method)
- Support sending and receiving HTML-formatted messages for ICQ.
- Use the proper URL for "View web profile" link for ICQ buddies. (Alexander Nartov)

* MSN
- Support for version 9 of the MSN protocol has been removed. This version is no longer supported on the servers.
- Support file transfer thumbnails (previews) for images.
- Fix CVE-2010-1624 (custom emoticon remote crash).

* XMPP
- Direct messages to a specific resource only upon receipt of a message with content (as opposed to a typing notification, etc). (Thanks to rjoly for testing)
- Present a better error message when authentication fails while trying to connect to Facebook. (David Reiss, Facebook)
- When sending data using in-band-bytestreams, interpret the block-size attribute as the size of the BASE64-encoded representation of the data.
- Validate the hash on incoming BoB data objects (for custom smileys etc.), cache based per JID when the CID is not a valid hash (as specified by the BoB XEP).
- Send whitespace keepalives if we haven't sent data in a while (2 minutes). This fixes an issue with Openfire disconnecting a libpurple-baesd client that has just been quiet for about 6 minutes.
- Only support Google Talk's JID Domain Discovery extension (allowing a user to log in with "@gmail.com" or "@googlemail.com" interchangeably) for those two domains. This change was made due to interoperability issues with some BOSH Connection Managers and namespaced attributes.

* Yahoo/Yahoo JAPAN
- Attempt to better handle transparent proxies interfering with HTTP-based login.
- Fix handling of P2P packets, thus fixing the loss of some messages.
- Retrieve the pager server address from Yahoo!'s servers directly.
- Removed the "Pager server" account option, as it is no longer needed.
- The authentication code is now less order-sensitive with the components of the server's response.
- The authentication process now acts more like the official client.

* Finch
- New action 'history-search', with default binding ctrl+r, to search the entered string in the input history.

* libpurple
- Fix 'make check' on OS X. (David Fang)
- Fix a quirk in purple_markup_html_to_xhtml that caused some messages to be improperly converted to XHTML.
- Set "controlling-mode" correctly when initializing a media session. Fixes receiving voice calls from Psi.
- When looking up DNS records, use the type of record returned by the server (instead of the type we asked for) to determine how to process the record.
- Fix an issue with parsing XML attributes that contain "<br>". See ChangeLog.API for more details.

* General
- Correctly disable all missing dependencies when using the --disable-missing-dependencies option. (Gabriel Schulhof)

* Gadu-Gadu
- Fix display of avatars after a server-side change. (Krzysztof Klinikowski)

* AIM
- Allow setting and displaying icons between 1x1 and 100x100 pixels. Previously only icons between 48x48 and 50x50 were allowed.

* MSN
- Fix CVE-2010-0277, a possible remote crash when parsing an incoming SLP message. (Discovered by Fabian Yamaguchi)
- File transfer requests will no longer cause a crash if you delete the file before the other side accepts.
- Received files will no longer hold an extra lock after completion, meaning they can be moved or deleted without complaints from your OS.
- Buddies who sign in from a second location will no longer cause an unnecessary chat window to open.
- Support setting an animated GIF as a buddy icon.
- Numerous code cleanups and memory savings.

* MySpace
- Fix a leak and crash when retrieving buddy icons.

* XMPP
- Less likely to send messages to a contact's idle/inactive resource. Previously, if a message was received from a specific resource, responses would be sent to that resource until either it went offline or a message is received from another resource. Now, messages are sent to the bare JID upon receipt of any presence change from the contact.
- Added support for the SCRAM-SHA-1 SASL mechanism. This is only available when built without Cyrus SASL support.
- When getting info on a domain-only (server) JID, show uptime (when given by the result of the "last query") and don't show status as offline.
- Fix getting info on your own JID.
- Wrap XHTML messages in <p>, as described in XEP-0071, for compatibility with some clients.
- Don't do an SRV lookup for a STUN server associated with the account if one is already set globally in prefs.
- Don't send custom smileys larger than the recommended maximum object size specified in the BoB XEP. This prevents a client from being disconnected by servers that dislike overly-large stanzas.
- Fix receiving messages without markup over an Openfire BOSH connection (forcibly put the stanzas in the jabber:client namespace).
- The default value for the file transfer proxies is automatically updated when an account connects, if it is still the old (broken) default (from 'proxy.jabber.org' to 'proxy.eu.jabber.org').
- Fix an issue where libpurple created duplicate buddies if the roster contains a buddy in two groups that differ only by case (e.g. "XMPP" and "xmpp") (or not at all).

* Yahoo
- Don't send <span> and </span> tags. (Fartash Faghri)
- Support PingBox. PingBoxes will appear as pbx/PingBoxName. (Kartik Mohta)

* Pidgin
- Fix CVE-2010-0423, a denial of service attack due to the parsing of large numbers of smileys. (Discovered by Antti Hayrynen)
- Correctly size conversation and status box entries when the interior-focus style property is diabled. (Gabriel Schulhof)
- Correctly handle a multiline text field being required in a request form. (Thanks to Florian Zeitz for finding this problem)
- Search friends by email-addresses in the buddy list. (Luoh Ren-Shan)
- Allow dropping an image on Custom Smiley window to add a new one.
- Prompt for confirmation when clearing a whiteboard (doodle) session. (Kartik Mohta)
- Use the "hand" cursor when hovering over usernames in chat history to indicate that the username is an actionable item.
- Double-clicking usernames in chat history will open an IM with that user.
- Put an icon on the "Filter" button in the debug window.
- Don't treat "/messages/like/this " as commands.
- Explicitly mark user interaction when inserting smilies from the toolbar so "Undo" correctly removes these smilies.
- Clicking "New" or "Saved" in the status selector menu while typing a status message no longer keeps the status entry area stuck in "typing" mode forever.
- Show tooltips for ellipsized conversation tabs. On older systems, tooltips will show for all tabs.
- The File Transfers and Debug Window windows are no longer created as dialogs. These windows should now have minimize buttons in many environments in which they were previously missing (including Windows).
- Smiley themes with Windows line endings no longer cause theme descriptions not to be displayed in the theme selector.

* Finch
- Fix CVE-2010-0420, a possible remote crash when handling chat room buddy names.
- Rebindable 'move-first' and 'move-last' actions for tree widgets. So it is possible to jump to the first or last entry in the buddy list (and other such lists) by pressing home or end key (defaults) respectively.

* libpurple
- TLS certificates are actually stored to the local cache once again (accepting a name mismatch on a certificate should now be remembered)

* General
- Build-time fixes for Solaris. (Paul Townsend)

* AIM and ICQ
- Messages from some mobile clients are no longer displayed as Chinese characters (broken in 2.6.4)

* MSN
- Fix an issue allowing a remote user to download arbitrary files from a libpurple client. (CVE-2010-0013)

* XMPP
- Do not crash when attempting to register for a new account on Windows.
- Fix file transfer with clients that do not support Entity Capabilities (e.g. Spark)

* libpurple
- Actually emit the hold signal for media calls.
- Fix building the GnuTLS plugin with older versions of GnuTLS.
- Fix DNS TXT query resolution.
- Don't send Proxy-Authorization headers to HTTP proxy servers until we've received a "407 Proxy Authentication Required" response from the server. (thecrux)
- Added "MXit" protocol plugin, supported and maintained by the MXit folks themselves (MXit Lifestyle (Pty) Ltd.)

* General
- New 'plugins' sub-command to 'debug' command (i.e. '/debug plugins') to announce the list of loaded plugins (in both Finch and Pidgin).
- Always rejoin open chats after an account reconnects.

* AIM and ICQ
- Better rate limit calculations and other improvements. (Aman Gupta)
- More detailed error messages when messages fail to send. (Aman Gupta)
- The simultaneous login account option is respected when using the clientLogin authentication method.
- Fix offline message retrieval (broken in 2.6.3)
- Fix handling of markup on some messages (broken in 2.6.2)
- Fix SSL when clientLogin is enabled.
- Fix sending and receiving Unicode characters in a Direct IM

* MSN
- Don't forget display names for buddies.
- Fix a random crash that might occur when idle.
- Fix more FQY 240 connection errors.
- Fix a crash that could occur when adding a buddy.
- Fix an occasional crash when sending message to an offline user.
- Fix a random crash that might occur when idle.
- Fix a crash when logging in with some long non-ASCII passwords. (Shaun Lindsay)
- Cache our own friendly name as the server no longer does that for us. Users of older versions may need to re-set their friendly name as it has probably been reset.

* XMPP
- Users connecting to Google Talk now have an "Initiate Chat" context menu option for their buddies. (Eion Robb)
- Fix a crash when attempting to validate an invalid JID.
- Resolve an issue when connecting to iChat Server when no resource is specified.
- Try to automatically find a STUN server by using an SRV lookup on the account's domain, and use that for voice and video if found and the user didn't set one manually in prefs.
- Fix a crash when adding a buddy without an '@'.
- Don't show the option to send a file to a buddy if we know for certain they don't support any file transfer method supported by libpurple.
- Keep the avatar on the server if one is not set locally.

* Yahoo
- Fix sending /buzz.
- Fix blocking behavior for federated (MSN/OCS/Sametime) service users. (Jason Cohen)
- Add support for adding OCS and Sametime buddies. OCS users are added as "ocs/user@…" and Sametime users are added as "ibm/sametime_id". (Jason Cohen)

* Finch
- The TinyURL plugin now creates shorter URLs for long non-conversation URLs, e.g. URLs to open Inbox in Yahoo/MSN protocols, or the Yahoo Captcha when joining chat rooms.
- Fix displaying umlauts etc. in non-utf8 locale (fix in libgnt).

* Pidgin
- The userlist in a multiuser chat can be styled via gtkrc by using the widget name "pidgin_conv_userlist". (Heiko Schmitt)
- Add a hold button to the media window.
- Fix a bug where the conversation backlog stops scrolling in a very busy chat room.
- In the Conversation "Send To" menu, offline buddies appear grayed out (but are still selectable). Previously, only offline buddies on accounts that do not support offline messaging appeared grayed out.

* Pidgin Preference and Preference Window Changes
- Removed the "Use font from theme" and "Conversation Font" preferences for everyone except Windows users. The font can be controlled from the Pidgin GTK+ Theme Control plugin.
- Tabs in the Preferences window are now on the left side.
- The Browser tab is now visible for GNOME users.
- Added a Proxy tab shown no matter what environment Pidgin runs in.
- The Browser and Proxy tabs show appropriate GNOME-specific messages and allow launching the correct applications to change the relevant GNOME preferences if found. These were previously together on the Network tab.
- Moved the port range spin buttons on the Network tab to be beside the checkbox that enables/disables them.
- Reorganized preferences on the Status/Idle tab to have one less "section."
- Reorganized preferences on the Sounds tab to have one less "section."
- Renamed Smiley Themes tab to Themes.
- Moved Buddy List Theme and Status Icon Theme selectors from Interface tab to Themes tab.
- Moved Sound Theme selector from Sounds tab to Themes tab.
- Changed the Smiley Theme selector to be consistent with the other theme selectors.
- Rearranged tabs such that Interface is first and all remaining tabs are alphabetized in English.

# General:
* Fix a crash when performing DNS queries on Unixes that use the blocking DNS lookups.

# AIM and ICQ:
* Fix a crash when some clients send contacts in a format we don't understand.
* Fix blocking and other privacy lists. (Thanks to AOL)

* libpurple
o Fix --disable-avahi to actually disable it in configure, as opposed to just making the warning non-fatal.
o Fix using GNOME proxy settings properly. (Erik van Pienbroek)

* IRC
o Fix parsing of invalid TOPIC messages. (CVE-2009-2703)

* MSN
o Sending custom smileys in chats is now supported.
o Ink messages are now saved when using the HTML logger.
o Fix a crash when receiving some handwritten messages.
o Fix a crash when receiving certain SLP invite messages.
o Chats with multiple people should no longer spontaneously disconnect.

* XMPP
o Prompt the user before cancelling a presence subscription.
o Escape status messages that have HTML entities in the Get Info dialog.
o Fix connecting to XMPP domains with no SRV records from Pidgin on Windows.
o Fix typing notifications with Pidgin 2.5.9 or earlier.
o Fix connecting using BOSH and legacy authentication (XEP-0078).
o Adding buddies of the form "romeo@…/Resource" are handled properly. In addition, it is no longer possible to add buddies of the form "room@…/User", where room@… is a MUC.
o Don't crash when receiving "smileyfied" XHTML-IM from clients that don't support bits of binary (ie. when getting an empty <data/> in return)
o Fix bug where SSL/TLS was not required even though the "require SSL/TLS" preference checked when connecting to servers that use the older iq-based authentication. (CVE-2009-3026)

* Yahoo!/Yahoo! JAPAN
o Accounts now have "Use account proxy for SSL connections" option. This option force-overrides the account specific proxy settings for SSL connections only and instead uses the global proxy configuration.

* Finch
o Properly detect libpanel on OpenBSD. (Brad Smith)
o Remove IO watches in gnt_quit. (Tomasz Mon)

* Pidgin
o Fix the auto-personize functionality in the Buddy List.
o Set the window icon for the media window to an icon corresponding to the type of call (headphone or webcam).
o Customized sound files are no longer reset whenever opening the Preferences dialog.
o The buddy list should now immediately refresh upon changing the icon theme.

* Fix a crash when some users send you a link in a Yahoo IM
* Fix compilation with GTK+ < 2.6.0
* Fix compilation on Windows

* ICQ
o Fix misparsing a web message as an SMS message. (Yuriy Kaminskiy)

* MSN
o Increase NS command history size to prevent crashes on buddy lists that have a lot of buddies on other networks like Yahoo!

* MySpace
o Accounts with empty buddy lists are now properly marked as connected.
o Fix receiving messages from users of MySpace IM's web client.

* Yahoo
o Fixed phantom online buddies. They should now properly disappear when signing out.
o Fixed the crashes some users were seeing with cn.scs.msg.yahoo.com in 2.5.7.
o Fixed compiling on systems with glib 2.4.x or older.
o Fixed an issue with file transfers. This may not resolve all issues, but it should resolve at least some of the most common ones.
o The pager server will automatically update to scsa.msg.yahoo.com if the user empties the field or if it is scs.msg.yahoo.com. This should ease the pain of transition to the new login method.

* XMPP
o Fix an incompatibility betweeen Prosody and libpurple clients.

* Yahoo Protocol 16 support, including new HTTPS login method; this should fix a number of login problems that have recently cropped up. (Sulabh Mahajan, Mike "Maiku" Ruprecht)
* Only display the AIM "Unable to Retrieve Buddy List" message once per connection. (Rob Taft)
* Blocking MSN users not on your buddy list no longer disconnects you.
* When performing operations on MSN, assume users are on the MSN/Passport network if we don't get network ID's for them.

* libpurple
o Improve sleep behavior by aggregation of longer timeouts on second boundaries to allow better power saving. (Arunan Balasubramaniam)
o Fix various crashes on exit.
o Make XML parsing more resilient to interactions with other libraries. This, along with the fix for libxml2 bug 564217, fixes the crashes on connect in XMPP with recent gst-plugins-bad (see #8830 for details).
o Many security related fixes

* IRC
o Correctly handle WHOIS for users who are joined to a large number of channels.
o Notify the user if a /nick command fails, rather than trying fallback nicks.

* MSN
o Fix a race condition causing occasional Pidgin crashes.
o Fix some errors about the friendly name changing too fast caused by MSN/Yahoo integration buddies.

* XMPP
o Less likely to pop up a new conversation window in disregard of the "Hide new IM conversations" preference.

* Yahoo
o Fix a crash when sending very long messages.
o Fix a bug where UTF-8 status messages get garbled when going idle.

libpurple:
* Fix a crash when removing an account with an unknown protocol id.
* Beta support for SSL connections for AIM and ICQ accounts. To
enable, check the "Use SSL" option from the Advanced tab when
editing your AIM or ICQ account. (Paul Aurich)
* Fix a memory leak in SILC. (Luke Petre)
* Fix some string handling in the SIMPLE prpl, which fixes some buddy name
handling and other issues. (Paul Aurich, Marcus Sundberg)
* Implement support for resolving DNS via the SOCKS4 proxy (SOCKS4a).

ICQ:
* Fix retrieval of status messages from users of ICQ 6.x, Miranda, and
other libpurple clients. (Daniel Ljungborg)
* Change client ID to match ICQ Basic 14.34.3096. This fixes publishing
of buddy icons and available messages.
* Properly publish status messages for statuses other than Available.
ICQ 6.x users can now see these status messages. (Daniel Ljungborg)
* Fix receipt of messages from the mobile client Slick. (David Jedelsky)

MSN:
* Fix transfer of buddy icons, custom smileys, and files from the
latest Windows Live Messenger 9 official client. (Thomas
Gibson-Robinson)
* Large (multi-part) messages are now correctly re-combined.
* Federated/Yahoo! buddies should now stop creating sync issues at
every signin. You may need to remove duplicates in the Address
Book. See the FAQ for more information. Thanks to Jason Lingohr
for lots of debugging and testing.
* Messages from Yahoo! buddies are no longer silently dropped.
* We now save and use the CacheKey for ABCH SOAP requests.
* Don't try to parse Personal Status Messages or Current Media if they
don't exist.
* Convert from ISO-8859-1 encoding to UTF-8 when no charset is specified
on incoming messages. This should fix some issues with messages from
older clients.
* Force sending the font "Segoe UI" if outgoing formatting doesn't specify
a font already.
* Queue callbacks when token updates are in progress to prevent two token
update attempts from trampling each other.
* Fixed a crash on Windows when removing a buddy's alias.
* Update the Address Book when buddies' friendly names change. This
prevents seeing an outdated alias or not seeing an alias at all for
buddies who are offline when you sign in.
* Update tokens for FindMembership and ABFindAll SOAP requests.
* We no longer try to send empty messages. This could happen when a
message contained only formatting and that formatting was not supported
on MSN.
* Buddies on both the Allow and Block list are now automatically
removed from the Allow list. Users with this problem will now no
longer receive an ADL 241 error. The problematic buddy should now
appear on the buddy list and can be removed or unblocked as desired.

XMPP:
* Resources using __HOSTNAME__ substitution will now grab only the short
hostname instead of the FQDN on systems which put the FQDN in the
hostname. (Mat?j Cepl)
* No longer send a 'to' attribute on an outgoing stanza when we haven't
received one. This fixes a registration bug as described in ticket
#6635.

Pidgin:
* Tooltip windows now appear below the mouse cursor. (Kosta Arvanitis)
* Tooltip windows now disappear on keypress events. (Kosta Arvanitis)
* Tooltip windows no longer linger when scrolling the buddy list. (Kosta
Arvanitis)

Finch:
* Allow rebinding keys to change the focused widget (details in the
man-page, look for GntBox::binding)

Changes:
libpurple:
* Fix a connection timeout with empty Gadu-Gady buddy lists. (Martin
Rosinski)
* Don't ignore namespace information when parsing XMPP data. (Michal
Witkowski)
* Fix a crash that occurred when retrieving certain Offline Messages
on MSN.
* Extended purple-url-handler to handle "gtalk" URI's. (Paul Aurich)
* Fix the hang on exit in Network Location Awareness for Windows XP
and Windows Vista. (Paul Aurich)

MSN:
* Change Contact Server to temporarily fix connection problems.
(Thanks to Youness Alaoui)

XMPP:
* Support for XEP-0191 blocking. (Vijay Raghunathan)
* Don't put SASL PLAIN or IQ Auth passwords in debug logs. (Paul Aurich)
* Fix removal of avatars (both PEP and vCard), we weren't removing
them correctly before. (Paul Aurich)

Pidgin:
* Fix a crash in the Add Account dialog when changing protocols under
certain circumstances.

Finch:
* Redirect stderr outputs to the debug window.
* Fix rebinding actions with the arrow-keys and tab.

Changes:
libpurple:
* The Buddy State Notification plugin no longer prints duplicate
notifications when the same buddy is in multiple groups. (Florian
Quèze)
* The Buddy State Notification plugin no longer turns JID's, MSN
Passport ID's, etc. into links. (Florian Quèze)
* purple-remote now has a "getstatusmessage" command to retrieve
the text of the current status message.
* Various fixes to the nullprpl. (Paul Aurich)
* Fix a crash when accessing the roomlist for an account that's not
connected. (Paul Aurich)
* Fix a crash in purple_accounts_delete that happens when this
function is called before the buddy list is initialized.
(Florian Quèze)
* Fix use of av_len in perl bindings to fix some off-by-one bugs
(Paul Aurich)
* On ICQ, advertise the ICQ 6 typing capability. This should fix
the reports of typing notifications not working with third-party
clients. (Jaromír Karmazín)
* Many QQ fixes and improvements, including the ability to connect
using QQ2008 protocol and sending/receiving of long messages.
The recommended version to use is still QQ2005.
* Fix a crash with DNS SRV lookups. (Florian Quèze)
* Fix a crash caused by authorization requests. (Florian Quèze)

Gadu-Gadu:
* Add support for IM images. (Adam Strzelecki)
* Gadu-Gadu now checks that UID's are valid. (Adam Strzelecki)
* Gadu-Gadu now does proper charset translations where needed. (Adam
Strzelecki)

MSN:
* Fix an error with offline messages by shipping the *new*
"Microsoft Secure Server Authority" and the "Microsoft Internet
Authority" certificates. These are now always installed even when
using --with-system-ssl-certs because most systems don't ship
those intermediate certificates.
* The Games and Office media can now be set and displayed (in
addition to the previous Music media). The Media status text now
shows the album, if possible.
* Messages sent from a mobile device while you were offline are now
correctly received.
* Server transfers after you've been connected for a long time
should now be handled correctly.
* Many improvements to handling of "federated" buddies, such as those
on the Yahoo network.
* Several known crashes have been resolved.
* Many other fixes and code cleanup.

MySpace:
* Respect your privacy settings set using the official MySpace client.
* Add support for blocking buddies.
* Fix a bug where buddies didn't appear in their correct groups the
first time you sign into your account.
* Properly disconnect and sign out of the service when logging off.
* Support for foreground and background font colors in outgoing IMs.
* Support for background font colors in incoming IMs.
* Many other fixes and code cleanup.

Sametime:
* Fix insanely long idle times for Sametime 7.5 buddies by assuming
0 idle time if the idle timestamp is in the future. (Laurent
Montaron)
* Fix a crash that can occur on login. (Raiko Nitzsche)
SIMPLE:
* Fix a crash when a malformed message is received.
* Don't allow connecting accounts if no server name has been
specified. (Florian Quèze)

XMPP:
* Fix the namespace URL we look for in PEP reply stanzas to match
the URL used in the 'get' requests (Paul Aurich)
* Resources can be set to the local machine's hostname by using
__HOSTNAME__ as the resource string. (Jonathan Sailor)
* Resources can now be left blank, causing the server to generate a
resource for us where supported. (Jonathan Sailor)
* Resources now default to no value, but "Home" is used if the
server refuses to provide a resource.
* Quit trying to get user info for MUC's. (Paul Aurich)
* Send "client-accepts-full-bind-result" attribute during SASL
login. This will fix Google Talk login failures if the user
configures the wrong domain for his/her account.
* Support new element to indicate no XEP-0084 User
Avatar. (Paul Aurich)
* Fix SHA1 avatar checksum errors that occur when one of the bytes
in a checksum begins with 0. (Paul Aurich)
* Fix a problem with duplicate buddies. (Paul Aurich)

Yahoo:
* Corrected maximum message lengths for Yahoo!
* Fix file transfers with older Yahoo protocol versions.

Zephyr:
* Enable auto-reply, to emulate 'zaway.' (Toby Schaffer)
* Fix a crash when an account is configured to use tzc but tzc is
not installed or the configured tzc command is invalid. (Michael
Terry)
* Fix a 10 second delay waiting on tzc if it is not installed or the
configured command is invalid. (Michael Terry)
Pidgin:
* On GTK+ 2.14 and higher, we're using the gtk-tooltip-delay setting
instead of our own (hidden) tooltip_delay pref. If you had
previously changed that pref, add a line like this to
~/.purple/gtkrc-2.0 (where 500 is the timeout (in ms) you want):
gtk-tooltip-timeout = 500
To completely disable tooltips (e.g. if you had an old
tooltip_delay of zero), add this to ~/.purple/gtkrc-2.0:
gtk-enable-tooltips = 0
* Moved the release notification dialog to a mini-dialog in the
buddylist. (Casey Ho)
* Fix a crash when closing an authorization minidialog with the X
then immediately going offline. (Paul Aurich)
* Fix a crash cleaning up custom smileys when Pidgin is closed.
* Fix adding a custom smiley using the context menu in a conversation
if no custom smilies have previously been added using the smiley
manager.
* Improved support for some message formatting in conversations.
* Allow focusing the coversation history or userlist with F6.
* Fixed the Send Button plugin to avoid duplicate buttons in a single
conversation.
* Double-clicking a saved status will now activate it and close the
saved status manager, rather than edit the status.

Finch:
* Allow binding meta+arrow keys for actions.
* Added default meta+erase binding for delete previous word.
* Added "Show When Offline" to buddy menus, so a plugin is no longer
needed.

Changes:
version 2.5.2 (10/19/2008):
libpurple:
* Fixed a crash on removing a custom buddy icon on a buddy.
* Fixed a crash caused by certain self-signed SSL certificates.
* Enable a number of strong ciphers which were previously disabled
when using NSS. (Thanks to Marcus Trautwig.)

Pidgin:
* The status selector now saves your message when changing status.
* Fix a case where a conversation window could close unexpectedly.
* A mute sounds option has been added to the preferences window to
help with discoverability. CTRL+S is no longer bound to mute.
* Added ability to change the color of visited links (using the theme
control plugin, or setting the color in ~/.gtkrc-2.0)
* Fix a crash occuring when a custom smiley is deleted and re-added and
used in an open conversation after being re-added.

Finch:
* A new 'Nested Grouping' option in the 'Grouping' plugin. Group
hierarchies are defined by the '/' character in the group names.
* A bug was fixed where some key-bindings wouldn't work with some TERMs
(e.g. xterm-color, screen-linux etc.)

MSN:
* Operations (such as moving to a new group) on contacts that were added
in the same session should now complete correctly, and not cause
synchronization errors at next login.
* Minor fixes to login process during a server transfer.
* Restored the "Has You" feature to the MSN protocol tooltips.
* ADL 205/214/etc errors should no longer prevent login.

XMPP:
* Sending and receiving custom smileys using the specification in
XEP-0231 (bits of binary) and XHTML-IM

Yahoo:
* Only send a Ping once every hour. This prevents the account from
being disconnected from the server periodically.