Release Notes: Support for OTR protocol version 2 was added. It will still interoperate with version 1 clients, though with a warning to the user. The OTR button now has a right-click context menu with some useful options. The OTR button now has icons in addition to text to indicate the state of a conversation. Most popups have been changed to inline messages in the conversation window.
Release Notes: If a Man-in-the-Middle steals both Alice's and Bob's DSA private keys, he can perform a birthday attack to try to get his session id with each end to match. Since the session id was only 64 bits long, his work was only 2^32, which is not enough. This release makes the session id the whole SHA-1 hash, instead of truncating it, to protect against this unlikely scenario.