hugo/content/post/2.14.5-released.md

Fri, 30 Aug 2024 19:33:36 -0500

author
Gary Kramlich <grim@reaperworld.com>
date
Fri, 30 Aug 2024 19:33:36 -0500
changeset 543
4ab2b8637540
parent 444
f19b90df2d5f
permissions
-rw-r--r--

Update the plugins page for the new process

This includes defining the process and providing a template for a new issue to
add new plugins. I did go through and audit `No IRC /WHO` so we had at least
one validated entry.

Testing Done:
Ran `npm run hugo:server` locally and verified the page worked and checked the new links.

Bugs closed: NEST-53

Reviewed at https://reviews.imfreedom.org/r/3450/

---
title: "2.14.5 Released!"
date: 2021-06-03T20:31:54-05:00
replaces: []
---

**Notice for Windows users:** We are aware of an issue with the installer
failing to download the dictionaries used for spellchecking. We are currently
working on a fix and hope to have this resolved as soon as possible.

Whoops we missed May, but hopefully you all enjoy this kind of rushed release!

Why was it rushed? Well a certain unnamed broker of software vulnerabilities
posted a bounty for vulnerabilities in Pidgin. Thus we quickly ran a bunch of
static analysis tools and patched everything we could find.

We have no reason to believe that 2.14.5 is any safer than 2.14.4 as the issues
the static analysis found should not be exploitable. However, we didn't want to
take a chance and leave them in.

We also changed the default value of the
`Enable automatic router port forwarding` preference from on to off. We suggest
you disable this setting as well if you're upgrading and you don't typically
send files directly to other users.

For the first time in a long time we updated our bundled TLS Certificates. This
should hopefully avoid some certificate warnings for some users but there's a
good chance some third party protocol plugins users might still see them.

Finally, with all the events regarding the Freenode and Libera IRC networks, we
decided to change the default IRC server from `irc.freenode.net` to
`irc.libera.chat`. We will maintain a presence on both networks for as long as
we have users there.

The complete changelog for this release is the following:

General:
* Updated our bundled certificates to the latest version from Mozilla.
  ({{% review 722 %}}) ({{% issue PIDGIN-17535 %}}) (Gary Kramlich)
* Made the project scan-build clean. ({{% review 692 %}}, {{% review 693 %}},
  {{% review 694 %}}, {{% review 695 %}}, {{% review 696 %}},
  {{% review 697 %}}, {{% review 698 %}}. {{% review 699 %}},
  {{% review 700 %}}, {{% review 701 %}}, {{% review 702 %}},
  {{% review 703 %}}, {{% review 704 %}}, {{% review 705 %}},
  {{% review 707 %}}, {{% review 708 %}}, {{% review 709 %}},
  {{% review 710 %}}, {{% review 711 %}}, {{% review 712 %}},
  {{% review 713 %}}, {{% review 714 %}}, {{% review 716 %}},
  {{% review 717 %}}, {{% review 718 %}}, {{% review 719 %}}) (Gary Kramlich)
* Fixed some of Gary's scan-build fixes that were a bit verbose.
  ({{% review 715 %}}) (Elliott Sales de Andrade)
* Disabled UPnP and NAT-PMP by default for new user. ({{% review 706 %}}) (Gary
  Kramlich)

IRC:
* Changed the default server to irc.libera.chat. ({{% review 675 %}}) (Gary
  Kramlich)

Windows Specific Changes:
* Fixed the installer not running when Mandatory ASLR was turned on.
  ({{% review 721 %}}) ({{% issue PIDGIN-17524 %}}) (Gary Kramlich)

You can find 2.14.5 on
[SourceForge](https://sourceforge.net/projects/pidgin/files/Pidgin/2.14.5/).

We hope everyone enjoys this release and the fixes it brings. Remember that if
you have any questions or comments we have a [variety of channels]({{< ref
"contact" >}}) where you can reach out to us.

mercurial