Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package weechat for openSUSE:Factory checked in at 2026-11-10 14:40:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/weechat (Old) and /work/SRC/openSUSE:Factory/.weechat.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "weechat" Tue Nov 10 14:40:04 2026 rev:100 rq:1396385 version:4.10.4 Changes: -------- --- /work/SRC/openSUSE:Factory/weechat/weechat.changes 2026-11-01 22:25:40.590621253 +0100 +++ /work/SRC/openSUSE:Factory/.weechat.new.3759290/weechat.changes 2026-11-10 14:40:52.317700802 +0100 @@ -1,0 +2,96 @@ +Mon Nov 9 17:22:23 UTC 2026 - Hunter Wardlaw <[email protected]> + +- Update to 4.10.4: + + Added + * build/container: add files to build container images (Debian and + Alpine) from the local sources, moved from repository + weechat-container + + Fixed + * core: fix memory leak when the upgrade file can not be read on + startup with option --upgrade + * core: fix memory leak in input of buffers restored by + command /upgrade + * core: fix crash in info "color_rgb2term" when the limit is greater + than 256 + * irc: fix use after free of a deleted server in raw messages, + which could cause a crash in raw buffer or on /upgrade + + Security + * relay: require exactly 6 digits in TOTP received from a client + with "api" and "weechat" protocols + * relay: check only the first password and TOTP received in command + "init" of "weechat" protocol, to prevent a client from blocking + WeeChat with many password checks (like PBKDF2) in a single + message (#2368) + +- Update to 4.10.3: + + Fixed + * core: fix send of uninitialized data to socks4 proxy when the + username has 127 chars or more, or when the address can not be + resolved + * core: fix completion of command and command arguments when there + is text with spaces after the cursor + * core: fix plural form in Italian translations, use plural for + zero + * fset, irc, script: fix freeze when the fset, script or /list + buffer is scrolled in a window too small to display the chat area + * irc: remove extra spaces after "online" in notify list + * irc: fix memory leak when receiving the reply to ISON command + sent for notify list + * irc: fix display of channels without topic in /list buffer + * irc: remove local variables "nick" and "host" in server and + channel buffers on disconnection + * irc, relay: display error code 0 instead of the last error code + when the connection is closed by the peer + * irc: keep the number of connection retries of each server address + when switching to the next address, so that the next IP of an + address is tried on next connection + * irc: fix display of messages sent to the server in raw buffer, + displayed twice and marked as modified even when no modifier + changed them + * relay: fix memory leak when relay clients are restored + after /upgrade + * trigger: set variables "tg_trigger_name" and "tg_hook_type" in + focus triggers, do not add them in the hashtable returned + * xfer: fix memory leak of token in passive DCC transfers + * xfer: fix send of files greater than 4 GiB with DCC, the transfer + failed or stalled after 4 GiB + * xfer: fix timeout of transfers when option xfer.network.timeout + is greater than 2147483 seconds + * xfer: fix socket closed twice when a transfer cannot be created + * xfer: fix crash when the size of a received file is missing in + signal "xfer_add" + * xfer: ignore data received beyond the file size in DCC file + transfer + * xfer: fix infinite loop in child process when resuming a file + shorter than the resume position + * xfer: do not start the transfer when the file to send cannot be + opened + + Security + * irc: refuse SASL success with SCRAM mechanisms when the server + signature has not been verified, to enforce mutual authentication + * irc: refuse SCRAM server nonce that does not start with the + client nonce + * irc: refuse SCRAM iteration count lower than 4096 received from + the server, to prevent offline dictionary attacks on the client + proof, or greater than 1000000, to prevent blocking WeeChat for + a long time + * relay/api: refuse number of hash iterations lower than 1 or + greater than 1000000 received from the remote relay, to prevent + blocking WeeChat for a long time + * relay: ignore IRC messages longer than 4096 bytes received from + a client and reply with numeric 417 (ERR_INPUTTOOLONG), to + prevent blocking WeeChat and consuming a lot of memory when + parsing huge messages (#2367) + * xfer: compare the whole server name in option xfer.file.auto_accept_nicks, + so that a nick is not auto-accepted on another server whose name + starts with the same chars + * xfer: validate resume position received in DCC RESUME and DCC + ACCEPT, to prevent a remote peer from completing a file transfer + with a truncated file (#2369) + +------------------------------------------------------------------- Old: ---- weechat-4.10.1.tar.xz weechat-4.10.1.tar.xz.asc weechat-4.10.2.tar.xz weechat-4.10.2.tar.xz.asc New: ---- weechat-4.10.4.tar.xz weechat-4.10.4.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ weechat.spec ++++++ --- /var/tmp/diff_new_pack.kuTj62/_old 2026-11-10 14:40:53.642756311 +0100 +++ /var/tmp/diff_new_pack.kuTj62/_new 2026-11-10 14:40:53.644756395 +0100 @@ -17,7 +17,7 @@ Name: weechat -Version: 4.10.2 +Version: 4.10.4 Release: 0 Summary: Multi-protocol extensible Chat Client License: GPL-3.0-or-later ++++++ weechat-4.10.1.tar.xz -> weechat-4.10.4.tar.xz ++++++ ++++ 8330 lines of diff (skipped)
