diff ChangeLog @ 29261:3a43e48c870e

propagate from branch 'im.pidgin.pidgin.2.6.5' (head 794204a24ba7bf26cdb07ae71b9573b09927d641) to branch 'im.pidgin.pidgin' (head 037ff1c0c37fb6717fbc6fe2c658d6f9dda4e148)

--- a/ChangeLog	Fri Jan 08 15:34:10 2010 +0000
+++ b/ChangeLog	Fri Jan 08 20:11:49 2010 +0000
@@ -1,17 +1,6 @@
 Pidgin and Finch: The Pimpin' Penguin IM Clients That're Good for the Soul
 
-version 2.6.5 (??/??/20??):
-	libpurple:
-	* TLS certificates are actually stored to the local cache once again
-	  (accepting a name mismatch on a certificate should now be remembered)
-
-	General:
-	* Build-time fixes for Solaris.  (Paul Townsend)
-
-	AIM and ICQ:
-	* Messages from some mobile clients are no longer displayed as
-	  Chinese characters (broken in 2.6.4)
-
+version 2.6.6 (??/??/20??):
 	Gadu-Gadu:
 	* Fix display of avatars after a server-side change. (Krzysztof
 	  Klinikowski)
@@ -31,6 +20,24 @@
 	* When getting info on a domain-only (server) JID, show uptime
 	  (when given by the result of the "last query") and don't show status as
 	  offline.
+
+version 2.6.5 (01/08/2010):
+	libpurple:
+	* TLS certificates are actually stored to the local cache once again
+	  (accepting a name mismatch on a certificate should now be remembered)
+
+	General:
+	* Build-time fixes for Solaris.  (Paul Townsend)
+
+	AIM and ICQ:
+	* Messages from some mobile clients are no longer displayed as
+	  Chinese characters (broken in 2.6.4)
+
+	MSN:
+	* Fix an issue allowing a remote user to download arbitrary files from
+	  a libpurple client.  (CVE-2010-0013)
+
+	XMPP:
 	* Do not crash when attempting to register for a new account on Windows.
 	* Fix file transfer with clients that do not support Entity Capabilities
 	  (e.g. Spark)