|
|
|
|
Changelog for irssi-1.1.2-1.2.x86_64.rpm :
* Wed Jan 09 2019 Ailin Nemui - update to 1.1.2 - Fix the resetting of window hiddenlevel (#861) - Fix clearing of hidelevel in layout (#951) - Fix accessing unallocated text when checking entry position (#930) - Fix uninitialised memory on empty lines (#873, GL#31, #878, [#877], #907, #914) - Fix use-after-free on expiration of hidden lines (#948) - Fix use-after-frees. By Maya Rashish (#919) - Fix out of bounds access in help display when window width is small (#949) - Fix paste_join_multiline (#971) - Correctly check for errno when displaying SSL errors. By Janik Rabe (#895) - Fix wrong signal emission argument count (#965) - Documentation (#920). Sync NEWS, scripts (#849) - Fix Perl detection on MacOS. By Dominyk Tiller (#927) - Misc fixes. By Jaroslav Škarvada (#982) * Thu Feb 15 2018 ailin.nemuiAATTgmail.com- update to 1.1.1 - Restore compatibility with OpenSSL < 1.0.2 (#820, #831) - Fix test compilation on some platforms (#815, #816) - Fix portability and backwards compatibility of test runner (#818, #845) - Prevent use after free error during the execution of some commands. Found by Joseph Bisch (GL#17, GL!24). - Revert netsplit print optimisation due to crashes (#465, #809, [#812], #819, #824). - Fix use after free when SASL messages are received in unexpected order (GL#26, GL!33). - Fix null pointer dereference in the tab completion when an empty nick is joined (GL#24, GL!31). - Fix use after free when entering oper password (GL#22, GL!32). - Fix null pointer dereference when too many windows are opened (GL#27, #837). - Fix out of bounds access in theme strings when the last escape is incomplete. Credit to Oss-Fuzz (#842). - Fix out of bounds write when using negative counts on window resize (GL#25, GL#29, #836). - Minor help correction. By William Jackson (#834). * Sun Jan 14 2018 ailin.nemuiAATTgmail.com- update to 1.1.0 * Colour is now re-set when reaching a comma, matching mIRC behaviour (#742, #740, #790) * Irssi now shows the initial nick and name on first start (#785, #786) * lynx is no longer required to run autogen.sh (#81, #781) * The command history no longer permits wrapping around (#686) * /foreach now correctly sends arguments as commands, stopping you from embarassing AMSGs (#659) * /server does not connect to servers anymore, use /server connect to change servers (#559, #649). + Add an option to ignore all channels or ignore all queries using /set activity_hide_targets. By Jari Matilainen (#612, [#779]) + Add a startup warning if the TERM var is wrong inside tmux/screen (#726) + Add option to hide certain levels from the textbuffer using /window hidelevel (#746, #808) + Irssi now has its first unit test (for mode parsing). By Will Storey (#793) + Added access to global command history when using window history, and a binding to erase entries from the command history (erase_history_entry) (#762) + -alternate_nick is now available as a network specific property. By Paul Townsend (#120, #771) + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum enter). By Edward Tomasz Napierala (#735, #755, #772) + Filenames (directories) ending with a / now tab-complete (#741) + UTF-8 should now work in regular expressions when using GRegex (the default) (#636, #653) + Nicks are now properly escaped on completion. By Oscar Linderholm (#693, #709) + /server add -port now works. By Jari Matilainen (#703) + Add a setting key_timeout to make key sequences automatically re-set when not finished (#644, #645) + Warn users about expired client certificates, as servers may refuse them (#211, #627) + Add a new net_start_ssl function for StartTLS. This is available from ABI 8 and can be used by protocol modules (#615, #622). + The %# code is now stored in the textbuffer, so for example web scripts can make use of it (#626) + Add new setting break_wide which can be used to enable breaking of wide characters (for east-asian users). Originally from FreeBSD ports. (#625) + Add fuzzing code (#610, #620, #701, #713) - Netsplits show properly again (#812) - Do not error on blank lines when using /exec -o. By Fabian Kurz (FS#902, #805) - Detect used nickname as reported by server. By Alexandre Morignot (#219, #804) - Prevent use after free error during the execution of some commands. Found by Joseph Bisch. (GL#17, GL!24) - Fix MODE parameter parsing when colon was used at a place Irssi didn\'t expect (#601, #766) - Fixed code to compile with - Werror=declaration-after-statement (#795) - Clang-format is now supported for git-clang-format (#784) - Fix use after free when changing the network of hilights. Reported by Rui Mathias. (#787, #788) - Fix positioning error when tab-completing non-ascii strings. (#752, #754) - In-development issues (#750, #751) - Clarify Alis in /help list (#699, #712) - Improve /lastlog performance from O(N^2) to O(N) (#715) - Fix a segfault on \"script destroyed\" signal. By Stephen Oberholtzer (#660, #661). - Fix early ISON error (#596, #647) - Documentation improvements. By Paolo Martini (#639). By Tristan Pepin (#731). By Paul Townsend (#684, #736). By Will Storey (#777) - Minor cleanups (#590). By Edward Tomasz Napierala (#734, [#738]). By Will Storey (#770) - Fix space issue in glib-2.0.m4 (#621) * Thu Jan 04 2018 ailin.nemuiAATTgmail.com- update to 1.0.6 - Fix invalid memory access when reading hilight configuration (#787, #788). - Fix null pointer dereference when the channel topic is set without specifying a sender (GL#20, GL!25). - Fix return of random memory when using incomplete escape codes (GL#21, GL!26). - Fix heap buffer overflow when completing certain strings (GL#19, GL!27). - Fix return of random memory when using an incomplete variable argument (GL#18, GL!28). * Fri Oct 20 2017 ailin.nemuiAATTgmail.com- update to 1.0.5 - Fix missing -sasl_method \'\' in /NETWORK (#718, #719). - Fix incorrect restoration of term state when hitting SUSP inside screen (#737, #733). - Fix out of bounds read when compressing colour sequences. Found by Hanno Böck (GL#12, GL!18). - Fix use after free condition during a race condition when waiting on channel sync during a rejoin (GL#13, GL!19). - Fix null pointer dereference when parsing certain malformed CTCP DCC messages (GL#14, GL!20). - Fix crash due to null pointer dereference when failing to split messages due to overlong nick or target (GL#15, GL!21). - Fix out of bounds read when trying to skip a safe channel ID without verifying that the ID is long enough (GL#16, GL!22). - Fix return of random memory when inet_ntop failed (#769). - Minor statusbar help update. By Robert Bisewski (#758, [#763]). * Fri Jul 07 2017 ailin.nemuiAATTgmail.com- update to 1.0.4 - Fix null pointer dereference when parsing invalid timestamp (GL#10, GL!15). Reported by Brian \'geeknik\' Carpenter. - Fix use-after-free condition when removing nicks from the internal nicklist (GL#11, GL!16). Reported by Brian \'geeknik\' Carpenter. - Fix incorrect string comparison in DCC file names (#714). - Fix regression in Irssi 1.0.3 where it would claim \"Invalid time \'-1\'\" (#716, #722). - Fix a bug when using \ to separate lines with expand_escapes (#723). - Retain screen output on improper exit, to better see any error messages (#287, #721). - Minor help update (#729). * Tue Jun 06 2017 ailin.nemuiAATTgmail.com- update to 1.0.3 - Fix out of bounds read when scanning expandos (GL!11). - Fix invalid memory access with quoted filenames in DCC (GL#8, GL!12). - Fix null-pointer dereference on DCC without address (GL#9, GL!13). - Improve integer overflow handling. Originally reported by oss-fuzz#525 (#706). - Improve nicklist performance from O(N^2) to O(N) (#705). - Fix initial screen redraw delay. By Stephen Oberholtzer (#680, bdo#856201). - Fix incorrect reset of true colours when resetting background. (#711). - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702). - Fix minor history glitch on overcounter (#462, #685). - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677). - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698). - Add missing syntax info for COMPLETION (#687, #688). - Minor typo correction in help. By Michael Hansen (#707). * Fri Mar 10 2017 ailin.nemuiAATTgmail.com- update to 1.0.2 - Prevent some null-pointer crashes (GL!9). - Fix compilation with OpenSSL 1.1.0 (#628, #597). - Correct dereferencing of already freed server objects during output of netjoins. Found by APic (GL!10, GL#7). - Fix in command arg parser to detect missing arguments in tail place (#652, #651). - Fix regression that broke incoming DCC file transfers (#667, #656). - Fix issue with escaping \\ in evaluated strings (#669, #520). * Sun Feb 05 2017 ailin.nemuiAATTgmail.com- update to 1.0.1 - Fix Perl compilation in object dir. By Martijn Dekker (#602, #623). - Disable EC cryptography on Solaris to fix build (#604, #598). - Fix incorrect HELP SERVER example (#606, #519). - Correct memory leak in /OP and /VOICE. By Tim Konick (#608). - Fix regression that broke second level completion (#613, #609). - Correct missing NULL termination in perl_parse. By Hanno Böck (#619). - Sync broken mail.pl script (#624, #607). * Thu Jan 05 2017 ailin.nemuiAATTgmail.com- update to 1.0.0 * Removed --disable-ipv6 (#408). * /connect Network now aborts with an error if no servers have been added to that network (#443). * /dcc commands now use quotes around spaces consistently. * bell_beeps was removed (#524, #565). * Switch to GRegex instead of regex.h (#412). + irssiproxy can now forward all tags through a single port. By Lukas Mai (mauke, #425). + irssiproxy can also listen on unix sockets. By Lukas Mai (#427). + send channel -botcmds immediately when no mask is specified (#175, #399). + the kill buffer now remembers consecutive kills. New bindings were added: yank_next_cutbuffer and append_next_kill By Todd A. Pratt (#353, #414, #455) + connections will avoid looking up IPv6 addresses if the machine does not have an IPv6 address assigned (exact behaviour is implementation defined, #410). + Fix potential crash if scripts insert undef values into the completion list (#413). + Paste warning is now also shown on pasting overlong lines. By Manish Goregaokar (#426). + autolog_ignore_targets and activity_hide_targets learn a new syntax tag/ * and * to ignore whole networks or everything. By Jari Matilainen (vague666, #437) + /hilight got a -matchcase flag to hilight case sensitively. By Thibault B (isundil, #421, #476). + Always build irssi with TLS support. + Rename SSL to TLS in the code and add -tls_ * versions of the -ssl_ * options to /CONNECT and /SERVER, but make sure the -ssl_ * options continue to work. + Use TLS for Freenode, EFnet, EsperNet, OFTC, Rizon, and IRC6 in the default configuration. + Display TLS connection information upon connect. You can disable this by setting tls_verbose_connect to FALSE. + Add -tls_pinned_cert and -tls_pinned_pubkey for x509 and public key pinning. The values needed for -tls_pinned_cert and -tls_pinned_pubkey is shown when connecting to a TLS enabled IRC server, but you can also find the values like this: Start by downloading the certificate from a given IRC server: $ openssl s_client -connect chat.freenode.net:6697 < /dev/null 2>/dev/null | \\ openssl x509 > freenode.cert Find the value for -tls_pinned_cert: $ openssl x509 -in freenode.cert -fingerprint -sha256 -noout Find the value for -tls_pinned_pubkey: $ openssl x509 -in freenode.cert -pubkey -noout | \\ openssl pkey -pubin -outform der | \\ openssl dgst -sha256 -c | \\ tr a-z A-Z + Remove support for DANE validation of TLS certificates. There wasn\'t enough support in the IRC community to push for this on the majority of bigger IRC networks. If you believe this should be reintroduced into irssi, then please come up with an implementation that does not rely on the libval library. It is causing a lot of troubles for our downstream maintainers. + /names and $[...] now uses utf8 string operations. By Xavier G. (#40, #411, #471, #480). + New setting completion_nicks_match_case (#488). + /channel /server /network now support modify subcommand. By Jari Matilainen (#338, #498). + Irssi::signal_remove now works with coderefs. By Tom Feist (shabble, #512). + /script reset got an -autorun switch (#540, #538). + cap_toggle can now be called from Perl, and fields cap_active and cap_supported can be inspected (#542). + Make it possible to disable empty line completion. By Lauri Tirkkonen (lotheac, #574). + New option sasl_disconnect_on_failure to disconnect when SASL log-in failed (#514). - IP addresses are no longer stored when resolve_reverse_lookup is used. - Removed broken support for curses (#521). - Removed broken dummy mode (#526). - Fix terminal state after suspend (#450, #452). - Improve Perl library path detection (#479, #132). - Reconnect now works on unix connections (#493). - Fix completion warnings (#125, #496, FS#124). - Fix a crash in the --more-- item (#501). - Fix a display issue in /unignore (#517, bdo#577202). - Fix a crash in some netsplits (#529, #500). - Fix crashes with some invalid config (#550, #551, #563, #564, #587, #581, #570). - Add support for SASL Fragmentation. By Kenny Root (kruton, #506). - Improve netsplit dumping (#420, #465). - Improve responsibility under DCC I/O strain (#578, #159). - Fix query nick change on open (#580, #586). - Correct a few help texts. * Tue Jan 03 2017 ailin.nemuiAATTgmail.com- update to 0.8.21 - Correct a NULL pointer dereference in the nickcmp function found by Joseph Bisch (GL#1) - Correct an out of bounds read in certain incomplete control codes found by Joseph Bisch (GL#2) - Correct an out of bounds read in certain incomplete character sequences found by Hanno Böck and independently by J. Bisch (GL#3) - Correct an error when receiving invalid nick message (GL#4, #466) * Mon Sep 26 2016 ailin.nemuiAATTgmail.com- update the buf.pl script to version 2.20 * Wed Sep 21 2016 ailin.nemuiAATTgmail.com- update to 0.8.20 - Correct the name of an emitted sasl signal (#484) - Correct the prototype for the \'message private\' signal (#515) - Corrections in away and hilight help text (#477, #518) - /squery and /servlist commands have been restored. - Where Irssi would previously only report \"System error\" on connect, it will now try harder to retrieve the system error message. - Fixed issue with +channels not working properly (#533) - Fixed crash in optchan when item has no server (#485) - Fixed random remote crash in the nicklist handling (#529) - Fixed remote crash due to incorrect bounds checking on formats, reported by Gabriel Campana and Adrien Guinet from Quarkslab. * Tue Mar 22 2016 ailin.nemuiAATTgmail.com- update to 0.8.19 - Fixed regression when joining and parting channels on IRCnet (#435) - Fixed SASL EXTERNAL (#432) - Fixed regression when not using SASL (#438) - Fixed incorrect SSL disconnects when using SSL from modules/scripts (#439) - Fixed regression where proxy_string could not be configured or certain file transfers could not be accepted (#445) - Fixed storing layout of !channels (#183) - Fixed restoration of bracketed paste mode on quit (#449) - Make the usage of meta-O for cursor keys configurable with /set term_appkey_mode off * Thu Feb 12 2015 ailin.nemuiAATTgmail.com- update to 0.8.18 * Modules will now require to define a void MODULENAME ## _abicheck(int *version) method to ensure that they are compiled against the correct Irssi version. * The signature of \"message private\" has been changed to 5: server, message, nick, address, target in order to support \"self messages\". Module authors should implement this change if they are using this signal. * Removing networks will now remove all attached servers and channels (#45). * The proxy module now has an /irssiproxy command. * sb_search has been moved to scripts.irssi.org * WIN32 has been completely removed (it had not been working and is lacking a maintainer.) * Garbage Collection support has been removed. This will hardly have any effect for anyone given that it has been unsupported for several years. + CAP SASL PLAIN login is now supported natively. + Paste bracket markers can be requested from terminal with /set paste_use_bracketed_mode on + \"Self messages\" generated by some bouncers can now be received in the proper window. + Try to split long lines on spaces to avoid words being splitted. Adds a new option: \'split_line_on_space\' which defaults to on. + Add setting hilight_nick_matches_everywhere (#56). + The config parser is more robust and prints out better diagnostics on incorrect config files. + Ctrl+^ (FS#721) and Ctrl+J can now be bound. + Command history can be cleared with /window history -clear + /hilight -mask -line is now supported (FS#275). + CHANTYPES are now supported. + Improved reload speed of ignores. + Add -date feature to /lastlog + irssiproxy can be more easily enabled and disabled. + Expando for hostname (FS#829). + UNIX sockets can now also be specified in the config file. + Disable SSLv3 due to the POODLE vulnerability. + SSL ciphers can now be specified per server. + Added SNI support for SSL. - /ignore now respects -pattern on merge (#78). - irssiproxy (BNC) module now uses correct line endings. - Fix missing lines on large pastes (FS#905). - Correctly preserve STATUSMSG prefixes (#291). - Fix infinite recursion in key bindings (FS#817). - Fix incomplete awaylog caused by buffering. - Fix calculation of UTF-8 string length display in some cases. - Fix some Perl warnings related to AATTISA. - EXEC windowitems now get proper references on the Perl side. - Incremental help file improvements. - ANSI attributes are now properly reset. - Fixed regression where text would blink when terminal lacks color support. - Permit the usage of Freenode extban syntax in /ban (#150) - Fixed regression in scriptassist on unload of scripts. - Fixed regression in -actcolor %n
|
|
|