hugo/content/post/2.14.5-released.md

Fri, 28 Feb 2025 00:58:39 -0600

author
Gary Kramlich <grim@reaperworld.com>
date
Fri, 28 Feb 2025 00:58:39 -0600
changeset 547
8400662befb3
parent 444
f19b90df2d5f
permissions
-rw-r--r--

Add the Meshtastic plugin

I meant to add this awhile ago but somehow missed it.

Testing Done:
Ran `npm run hugo:server` and verified the plugin showed up.

Reviewed at https://reviews.imfreedom.org/r/3861/

---
title: "2.14.5 Released!"
date: 2021-06-03T20:31:54-05:00
replaces: []
---

**Notice for Windows users:** We are aware of an issue with the installer
failing to download the dictionaries used for spellchecking. We are currently
working on a fix and hope to have this resolved as soon as possible.

Whoops we missed May, but hopefully you all enjoy this kind of rushed release!

Why was it rushed? Well a certain unnamed broker of software vulnerabilities
posted a bounty for vulnerabilities in Pidgin. Thus we quickly ran a bunch of
static analysis tools and patched everything we could find.

We have no reason to believe that 2.14.5 is any safer than 2.14.4 as the issues
the static analysis found should not be exploitable. However, we didn't want to
take a chance and leave them in.

We also changed the default value of the
`Enable automatic router port forwarding` preference from on to off. We suggest
you disable this setting as well if you're upgrading and you don't typically
send files directly to other users.

For the first time in a long time we updated our bundled TLS Certificates. This
should hopefully avoid some certificate warnings for some users but there's a
good chance some third party protocol plugins users might still see them.

Finally, with all the events regarding the Freenode and Libera IRC networks, we
decided to change the default IRC server from `irc.freenode.net` to
`irc.libera.chat`. We will maintain a presence on both networks for as long as
we have users there.

The complete changelog for this release is the following:

General:
* Updated our bundled certificates to the latest version from Mozilla.
  ({{% review 722 %}}) ({{% issue PIDGIN-17535 %}}) (Gary Kramlich)
* Made the project scan-build clean. ({{% review 692 %}}, {{% review 693 %}},
  {{% review 694 %}}, {{% review 695 %}}, {{% review 696 %}},
  {{% review 697 %}}, {{% review 698 %}}. {{% review 699 %}},
  {{% review 700 %}}, {{% review 701 %}}, {{% review 702 %}},
  {{% review 703 %}}, {{% review 704 %}}, {{% review 705 %}},
  {{% review 707 %}}, {{% review 708 %}}, {{% review 709 %}},
  {{% review 710 %}}, {{% review 711 %}}, {{% review 712 %}},
  {{% review 713 %}}, {{% review 714 %}}, {{% review 716 %}},
  {{% review 717 %}}, {{% review 718 %}}, {{% review 719 %}}) (Gary Kramlich)
* Fixed some of Gary's scan-build fixes that were a bit verbose.
  ({{% review 715 %}}) (Elliott Sales de Andrade)
* Disabled UPnP and NAT-PMP by default for new user. ({{% review 706 %}}) (Gary
  Kramlich)

IRC:
* Changed the default server to irc.libera.chat. ({{% review 675 %}}) (Gary
  Kramlich)

Windows Specific Changes:
* Fixed the installer not running when Mandatory ASLR was turned on.
  ({{% review 721 %}}) ({{% issue PIDGIN-17524 %}}) (Gary Kramlich)

You can find 2.14.5 on
[SourceForge](https://sourceforge.net/projects/pidgin/files/Pidgin/2.14.5/).

We hope everyone enjoys this release and the fixes it brings. Remember that if
you have any questions or comments we have a [variety of channels]({{< ref
"contact" >}}) where you can reach out to us.

mercurial