v4.10.1Desktop
Fixed 2
- Fix memory leak in SASL authentication with mechanism ecdsa-nist256p-challenge
- Reject an empty SASL challenge received with mechanism ecdsa-nist256p-challenge
Security 7
- Limit size of data queued for sending to a client in relay to prevent memory exhaustion
- Reject fragmented, compressed or oversized websocket control frames received from a client in relay
- Limit size of partial message received from a client in relay to prevent memory exhaustion
- Reject script names containing path separators in the scripts repository file to prevent writing files outside the scripts directory
- Fix comparison of status in search of transfers to prevent a remote peer from starting a file transfer that was not accepted by the user
- Limit size of partial message received in DCC chat in xfer to prevent memory exhaustion
- Remove path from filename received in DCC file transfer in xfer to prevent writing the file outside the download directory
From WeeChat
Fixed
- irc: fix memory leak in SASL authentication with mechanism "ecdsa-nist256p-challenge"
- irc: reject an empty SASL challenge received with mechanism "ecdsa-nist256p-challenge"
Security
- relay: limit size of data queued for sending to a client to prevent memory exhaustion (#2357)
- relay: reject fragmented, compressed or oversized websocket control frames received from a client (#2356)
- relay: limit size of partial message received from a client to prevent memory exhaustion (#2347)
- script: reject script names containing path separators in the scripts repository file to prevent writing files outside the scripts directory (#2351)
- xfer: fix comparison of status in search of transfers, preventing a remote peer from starting a file transfer that was not accepted by the user (#2352)
- xfer: limit size of partial message received in DCC chat to prevent memory exhaustion (#2349)
- xfer: remove path from filename received in DCC file transfer to prevent writing the file outside the download directory (#2348)