pidgin/nest

Add a blog post for the 2.14.5 release

2021-06-03, Gary Kramlich
742be97e96d6
Parents 54bfc0e14a15
Children 6731ed3f1357
Add a blog post for the 2.14.5 release

Testing Done:
Ran locally

Reviewed at https://reviews.imfreedom.org/r/725/
1 files changed, 67 insertions(+), 0 deletions(-)
  • +67 -0
    hugo/content/post/2.14.5-released.md
    • --- /dev/null Thu Jan 01 00:00:00 1970 +0000
    +++ b/hugo/content/post/2.14.5-released.md Thu Jun 03 23:19:13 2021 -0500
    @@ -0,0 +1,67 @@
    +---
    +title: "2.14.5 Released!"
    +date: 2021-06-03T20:31:54-05:00
    +replaces: []
    +---
    +
    +**Notice for Windows users:** We are aware of an issue with the installer
    +failing to download the dictionaries used for spellchecking. We are currently
    +working on a fix and hope to have this resolved as soon as possible.
    +
    +Whoops we missed May, but hopefully you all enjoy this kind of rushed release!
    +
    +Why was it rushed? Well a certain unnamed broker of software vulnerabilities
    +posted a bounty for vulnerabilities in Pidgin. Thus we quickly ran a bunch of
    +static analysis tools and patched everything we could find.
    +
    +We have no reason to believe that 2.14.5 is any safer than 2.14.4 as the issues
    +the static analysis found should not be exploitable. However, we didn't want to
    +take a chance and leave them in.
    +
    +We also changed the default value of the
    +`Enable automatic router port forwarding` preference from on to off. We suggest
    +you disable this setting as well if you're upgrading and you don't typically
    +send files directly to other users.
    +
    +For the first time in a long time we updated our bundled TLS Certificates. This
    +should hopefully avoid some certificate warnings for some users but there's a
    +good chance some third party protocol plugins users might still see them.
    +
    +Finally, with all the events regarding the Freenode and Libera IRC networks, we
    +decided to change the default IRC server from `irc.freenode.net` to
    +`irc.libera.chat`. We will maintain a presence on both networks for as long as
    +we have users there.
    +
    +The complete changelog for this release is the following:
    +
    +General:
    +* Updated our bundled certificates to the latest version from Mozilla.
    + ({{% review 722 %}}) ({{% issue PIDGIN-17535 %}}) (Gary Kramlich)
    +* Made the project scan-build clean. ({{% review 692 %}}, {{% review 693 %}},
    + {{% review 694 %}}, {{% review 695 %}}, {{% review 696 %}},
    + {{% review 697 %}}, {{% review 698 %}}. {{% review 699 %}},
    + {{% review 700 %}}, {{% review 701 %}}, {{% review 702 %}},
    + {{% review 703 %}}, {{% review 704 %}}, {{% review 705 %}},
    + {{% review 707 %}}, {{% review 708 %}}, {{% review 709 %}},
    + {{% review 710 %}}, {{% review 711 %}}, {{% review 712 %}},
    + {{% review 713 %}}, {{% review 714 %}}, {{% review 716 %}},
    + {{% review 717 %}}, {{% review 718 %}}, {{% review 719 %}}) (Gary Kramlich)
    +* Fixed some of Gary's scan-build fixes that were a bit verbose.
    + ({{% review 715 %}}) (Elliott Sales de Andrade)
    +* Disabled UPnP and NAT-PMP by default for new user. ({{% review 706 %}}) (Gary
    + Kramlich)
    +
    +IRC:
    +* Changed the default server to irc.libera.chat. ({{% review 675 %}}) (Gary
    + Kramlich)
    +
    +Windows Specific Changes:
    +* Fixed the installer not running when Mandatory ASLR was turned on.
    + ({{% review 721 %}}) ({{% issue PIDGIN-17524 %}}) (Gary Kramlich)
    +
    +You can find 2.14.5 on
    +[SourceForge](https://sourceforge.net/projects/pidgin/files/Pidgin/2.14.5/).
    +
    +We hope everyone enjoys this release and the fixes it brings. Remember that if
    +you have any questions or comments we have a [variety of channels]({{< ref
    +"about/community" >}}) where you can reach out to us.