[Telepathy] Announce: telepathy-gabble 0.17.4

[Simon McVittie]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The “unattainably high curry standards” release.

tarball:
http://telepathy.freedesktop.org/releases/telepathy-gabble/telepathy-gabble-0.17.4.tar.gz
signature:
http://telepathy.freedesktop.org/releases/telepathy-gabble/telepathy-gabble-0.17.4.tar.gz.asc
git: http://cgit.freedesktop.org/telepathy/telepathy-gabble

This development release fixes the same man-in-the-middle attack as
0.16.6.

If you use an unencrypted connection to a "legacy Jabber" (pre-XMPP)
server, this version of Gabble will not connect until you make
one of these configuration changes:

• upgrade the server software to something that supports XMPP 1.0; or
• use an encrypted "old SSL" connection, typically on port 5223
  (old-ssl); or
• turn off "Encryption required (TLS/SSL)" (require-encryption)

Fixes:

• update Wocky:
  · fd.o #61792: fix linking an example program with ld versions that
    default to --no-copy-dt-needed-entries
  · fd.o #65036 (CVE-2013-1431): update Wocky to respect the
    tls-required flag on legacy Jabber servers

• fd.o #63119: improve regression tests' isolation from the session bus
  (Simon)

• fd.o #64319: consider the <URL> field to be "supported" on Google
  servers (it's currently read-only and contains a Google+ URL) (Xavier)

• fd.o #64354: don't claim we support X-TELEPATHY-PASSWORD if we don't
  know the username (Xavier)
-----BEGIN PGP SIGNATURE-----
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=jluK
-----END PGP SIGNATURE-----