Bug 12486 - pidgin fails to connect to jabber.org, facebook.com
Summary: pidgin fails to connect to jabber.org, facebook.com
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 4
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL: https://developer.pidgin.im/ticket/15...
Whiteboard: advisory MGA4-32-OK MGA4-64-OK
Keywords: PATCH, Triaged, UPSTREAM, validated_update
Depends on:
Blocks: 12468
  Show dependency treegraph
 
Reported: 2014-01-31 10:19 CET by Götz Waschk
Modified: 2014-02-05 16:47 CET (History)
6 users (show)

See Also:
Source RPM: pidgin-2.10.8-1.mga4.src.rpm
CVE:
Status comment:


Attachments
fix XMPP login with some servers (4.70 KB, patch)
2014-01-31 10:21 CET, Götz Waschk
Details | Diff

Description Götz Waschk 2014-01-31 10:19:48 CET
The security fix in pidgin 2.10.8 broke several XMPP servers that interpreted the XMPP protocol in a different (broken?) way. These include facebook chat and jabber.org.

Upstream has a fix scheduled for pidgin 2.10.9:
https://developer.pidgin.im/ticket/15879#comment:30
Comment 1 Götz Waschk 2014-01-31 10:21:30 CET
Created attachment 4907 [details]
fix XMPP login with some servers

I have edited the patch removing the ChangeLog part to apply cleanly to 2.10.8.
Götz Waschk 2014-01-31 10:22:05 CET

Keywords: (none) => UPSTREAM
URL: (none) => https://developer.pidgin.im/ticket/15879#comment:30
Source RPM: (none) => pidgin-2.10.8-1.mga4.src.rpm

Manuel Hiebel 2014-01-31 11:17:40 CET

Keywords: (none) => PATCH, Triaged
Assignee: bugsquad => mageia

Comment 2 Damien Lallement 2014-02-04 19:00:04 CET
Fixed with 2.10.9 in cauldron.
I will update 2.10.9 to 3/4 as the only fix is about this bug.
Thanks!

Status: NEW => ASSIGNED
Version: Cauldron => 4
Whiteboard: (none) => MGA3TOO

Damien Lallement 2014-02-04 19:50:25 CET

Depends on: (none) => 12468

Samuel Verschelde 2014-02-04 21:38:25 CET

Blocks: (none) => 12468
Depends on: 12468 => (none)

Comment 3 Samuel Verschelde 2014-02-04 21:39:59 CET
This bug report will be used for the Mageia 4 update.

===== Advisory ======
Pidgin has been updated to version 2.10.9 to fix problems logging into some
servers, including jabber.org and chat.facebook.com.

References:
https://developer.pidgin.im/ticket/15879
https://developer.pidgin.im/wiki/ChangeLog

The package list is below:

pidgin-2.10.9-1.mga4
pidgin-plugins-2.10.9-1.mga4
pidgin-perl-2.10.9-1.mga4
pidgin-tcl-2.10.9-1.mga4
pidgin-silc-2.10.9-1.mga4
libpurple-devel-2.10.9-1.mga4
libpurple0-2.10.9-1.mga4
libfinch0-2.10.9-1.mga4
finch-2.10.9-1.mga4
pidgin-bonjour-2.10.9-1.mga4
pidgin-meanwhile-2.10.9-1.mga4
pidgin-client-2.10.9-1.mga4
pidgin-i18n-2.10.9-1.mga4

from pidgin-2.10.9-1.mga4.src.rpm
Samuel Verschelde 2014-02-04 21:40:17 CET

CC: (none) => stormi
Assignee: mageia => qa-bugs

Samuel Verschelde 2014-02-04 21:42:06 CET

Whiteboard: MGA3TOO => (none)

Comment 4 darkduck 2014-02-04 22:05:37 CET
Samuel, which repository these packages are in? If none, when will they appear?
Thanks!

CC: (none) => darkduck

Comment 5 Samuel Verschelde 2014-02-04 22:12:27 CET
They will be in Core Updates Testing when mirrors have synced, it should be very soon. Don't forget to update your media to make it appear in the list of available packages (personal tip: urpmi.addmedia "" updates all media, activated or not)
Comment 6 David Walser 2014-02-04 22:44:20 CET
Thanks Samuel.  Raising priority as this blocks the other one.

Severity: major => critical

Comment 7 darkduck 2014-02-04 22:48:55 CET
(In reply to Samuel VERSCHELDE from comment #5)
> They will be in Core Updates Testing when mirrors have synced, it should be
> very soon. Don't forget to update your media to make it appear in the list
> of available packages (personal tip: urpmi.addmedia "" updates all media,
> activated or not)

It is already available for me. Seems to be working fine.
Comment 8 Samuel Verschelde 2014-02-04 22:50:56 CET
What arch are you testing on and what version of Mageia? And have you tested chat.jabber.org and/or chat.facebook.com?
Comment 9 darkduck 2014-02-04 22:53:25 CET
Samuel, Mageia 4 x86_64.
I don't have chat.jabber.org, so only tested chat.facebook.com. It connects fine, I can send and receive messages.
Samuel Verschelde 2014-02-04 22:59:25 CET

Whiteboard: (none) => MGA3-64-OK

Samuel Verschelde 2014-02-04 23:06:03 CET

Whiteboard: MGA3-64-OK => MGA4-64-OK

Comment 10 claire robinson 2014-02-05 10:14:20 CET
Advisory uploaded

Whiteboard: MGA4-64-OK => advisory MGA4-64-OK

Comment 11 Shlomi Fish 2014-02-05 10:51:06 CET
(In reply to darkduck from comment #9)
> Samuel, Mageia 4 x86_64.
> I don't have chat.jabber.org, so only tested chat.facebook.com. It connects
> fine, I can send and receive messages.

Same. Mageia 4 x86_64. Installed the pidgin upload ( Pidgin about shows Pidgin version 2.10.9 and libpurple version 2.10.8 ), and Facebook chat is working fine. I have a @jabber.org account, but Pidgin is unable to connect to it for some reason (@jabber.org is unreliable though). Pidgin-2.10.9 worked fine with it on Cauldron though.

Regards,

-- Shlomi Fish

CC: (none) => shlomif

Comment 12 Götz Waschk 2014-02-05 10:55:11 CET
jabber.org is currently down, so it cannot be tested at this moment.
Comment 13 claire robinson 2014-02-05 10:57:05 CET
We just need an i586 test to be able to validate. 
Anybody have it available? VM is fine.
Comment 14 Shlomi Fish 2014-02-05 12:33:49 CET
(In reply to claire robinson from comment #13)
> We just need an i586 test to be able to validate. 
> Anybody have it available? VM is fine.

I should be able to test on an i586 VM. However, now I'm kind of in a hurry because I have an appointment downtown soon.

Regards,

-- Shlomi Fish
Comment 15 Rémi Verschelde 2014-02-05 13:48:41 CET
Testing complete on Mageia 4 i586 (VM).

--

Validating update. The advisory has already been uploaded.

Could a sysadmin please push the update to Mageia 4 core/updates?

Keywords: (none) => validated_update
Whiteboard: advisory MGA4-64-OK => advisory MGA4-32-OK MGA4-64-OK
CC: (none) => remi, sysadmin-bugs

Comment 16 Shlomi Fish 2014-02-05 15:41:18 CET
(In reply to Rémi Verschelde from comment #15)
> Testing complete on Mageia 4 i586 (VM).
> 

Thanks for testing it there, Rémi!

> --
> 
> Validating update. The advisory has already been uploaded.
> 
> Could a sysadmin please push the update to Mageia 4 core/updates?

-- Shlomi Fish
Comment 17 Thomas Backlund 2014-02-05 16:47:30 CET
Update pushed:
http://advisories.mageia.org/MGAA-2014-0016.html

Status: ASSIGNED => RESOLVED
CC: (none) => tmb
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.