pidgin/nest

Add a blog post for the 2.14.5 release

5 months ago, Gary Kramlich
742be97e96d6
Parents 54bfc0e14a15
Children 6731ed3f1357
Add a blog post for the 2.14.5 release

Testing Done:
Ran locally

Reviewed at https://reviews.imfreedom.org/r/725/
--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/hugo/content/post/2.14.5-released.md Thu Jun 03 23:19:13 2021 -0500
@@ -0,0 +1,67 @@
+---
+title: "2.14.5 Released!"
+date: 2021-06-03T20:31:54-05:00
+replaces: []
+---
+
+**Notice for Windows users:** We are aware of an issue with the installer
+failing to download the dictionaries used for spellchecking. We are currently
+working on a fix and hope to have this resolved as soon as possible.
+
+Whoops we missed May, but hopefully you all enjoy this kind of rushed release!
+
+Why was it rushed? Well a certain unnamed broker of software vulnerabilities
+posted a bounty for vulnerabilities in Pidgin. Thus we quickly ran a bunch of
+static analysis tools and patched everything we could find.
+
+We have no reason to believe that 2.14.5 is any safer than 2.14.4 as the issues
+the static analysis found should not be exploitable. However, we didn't want to
+take a chance and leave them in.
+
+We also changed the default value of the
+`Enable automatic router port forwarding` preference from on to off. We suggest
+you disable this setting as well if you're upgrading and you don't typically
+send files directly to other users.
+
+For the first time in a long time we updated our bundled TLS Certificates. This
+should hopefully avoid some certificate warnings for some users but there's a
+good chance some third party protocol plugins users might still see them.
+
+Finally, with all the events regarding the Freenode and Libera IRC networks, we
+decided to change the default IRC server from `irc.freenode.net` to
+`irc.libera.chat`. We will maintain a presence on both networks for as long as
+we have users there.
+
+The complete changelog for this release is the following:
+
+General:
+* Updated our bundled certificates to the latest version from Mozilla.
+ ({{% review 722 %}}) ({{% issue PIDGIN-17535 %}}) (Gary Kramlich)
+* Made the project scan-build clean. ({{% review 692 %}}, {{% review 693 %}},
+ {{% review 694 %}}, {{% review 695 %}}, {{% review 696 %}},
+ {{% review 697 %}}, {{% review 698 %}}. {{% review 699 %}},
+ {{% review 700 %}}, {{% review 701 %}}, {{% review 702 %}},
+ {{% review 703 %}}, {{% review 704 %}}, {{% review 705 %}},
+ {{% review 707 %}}, {{% review 708 %}}, {{% review 709 %}},
+ {{% review 710 %}}, {{% review 711 %}}, {{% review 712 %}},
+ {{% review 713 %}}, {{% review 714 %}}, {{% review 716 %}},
+ {{% review 717 %}}, {{% review 718 %}}, {{% review 719 %}}) (Gary Kramlich)
+* Fixed some of Gary's scan-build fixes that were a bit verbose.
+ ({{% review 715 %}}) (Elliott Sales de Andrade)
+* Disabled UPnP and NAT-PMP by default for new user. ({{% review 706 %}}) (Gary
+ Kramlich)
+
+IRC:
+* Changed the default server to irc.libera.chat. ({{% review 675 %}}) (Gary
+ Kramlich)
+
+Windows Specific Changes:
+* Fixed the installer not running when Mandatory ASLR was turned on.
+ ({{% review 721 %}}) ({{% issue PIDGIN-17524 %}}) (Gary Kramlich)
+
+You can find 2.14.5 on
+[SourceForge](https://sourceforge.net/projects/pidgin/files/Pidgin/2.14.5/).
+
+We hope everyone enjoys this release and the fixes it brings. Remember that if
+you have any questions or comments we have a [variety of channels]({{< ref
+"about/community" >}}) where you can reach out to us.