From ${URL} : <message from='xxxxxxxxxx' to='xxxxxxxxxxxx' xml:lang='de' type='chat' id='386'> <body>asd</body> <html xmlns='http://jabber.org/protocol/xhtml-im'> <body xmlns='http://www.w3.org/1999/xhtml'> <p> <strong>asd</strong> </p> </body> <body xmlns='http://www.w3.org/1999/xhtml'>?OTR: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.</body> </html> <active xmlns='http://jabber.org/protocol/chatstates'/> <request xmlns='urn:xmpp:receipts'/> <thread>NNJdLcCElUpAPnWLvRiekJIBxAiJUdAc</thread> <private xmlns='urn:xmpp:carbons:2'/> <no-permanent-store xmlns='urn:xmpp:hints'/> <no-copy xmlns='urn:xmpp:hints'/> </message> Commit fix: https://trac-plugins.gajim.org/changeset/c7c2e519ed63377bc943dd01c4661b0fe49321ae @maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.
@arches, please stabilize: =net-im/gajim-0.16.6-r1 GLSA Vote: No
1. This bug is in 3rd party OTR plugin. It is not included in gajim package and can be installed via Plugin Installer. 2. Patch commited to the gentoo repo is empty :) https://gitweb.gentoo.org/repo/gentoo.git/tree/net-im/gajim/files/gajim-0.16.6-otr-cleartext-leak-fix.patch
How I possibly could commit an empty patch? I guess I have just taken a look at diff in webui, downloaded empty patch without second look at it, and because empty patch applies cleanly, I've just pushed that. What a shame... I am sorry for that. It won't happen again. I'll just remove gajim-0.16.6-r1.ebuild. Because it's a plugin not managed within Portage, I think this bug can be closed. Thanks Alexander for constant vigilance!
@maintainer, thanks for the information.
