Commit Graph
5859 Commits
Author SHA1 Message Date
Alexey Sokolov 2fb9746406 Return version number to 1.10.x 2026-09-13 09:10:25 +01:00
Alexey Sokolov 6bd91573ce Increase the version number to 1.10.3 znc-1.10.3 2026-09-13 09:05:34 +01:00
RealKindOne af5cdd0192 crypt: Modernize and add test. Fix OnNumericMessage 332 issue.
It was possible to trigger null pointer dereference during
OnNumericMessage

The affected versions are 1.7.0+

CVE-2026-82374
2026-09-12 19:08:21 +01:00
Alexey Sokolov 4b88c64c6e Fix crash while unloading modules
The bug allowed unprivileged users to trigger use-after-free while
unloading modules

Note that the fix requires a slight API change for OnEmbeddedWebRequest:
now the callers (webadmin is the only known caller of it) call it via
DoEmbeddedWebRequest() instead. The modules which implement this hook
need no changes.

CVE-2026-82373

Found by Claude from Anthropic, reported by Ada Logics.
2026-09-12 19:08:21 +01:00
Alexey Sokolov d9b392afd9 Update jQuery to 3.5.1
Fix #2040
CVE-2020-11022, CVE-2020-11023
2026-09-06 09:45:58 +01:00
ZNC-Jenkins a0778c296e Update translations from Crowdin for fr_FR 2026-08-08 00:26:33 +00:00
Alexey Sokolov eba009c49e Return version number to 1.10.x 2026-05-07 20:07:43 +01:00
Alexey Sokolov 59af2206c6 Increase the version number to 1.10.2 znc-1.10.2 2026-05-07 20:00:42 +01:00
Alexey Sokolov 94aa541793 ZNC 1.10.2-rc1 znc-1.10.2-rc1 2026-04-23 21:19:26 +01:00
Dominique Leuenberger 49af1c8d53 Fix build with SWIG 4.4
SWIG 4.4 has dropped the usage of SWIG_NULLPTR again, which means we can't
rely on its presence to identify SWIG >= 4.2.0

Generate a swig_version.h by parsing the output of `swig -version` and
writing this in a hex representation

Fixes #1979
2025-12-10 00:34:39 +00:00
ZNC-Jenkins 18416d7df6 Update translations from Crowdin for 2025-12-06 00:26:11 +00:00
ZNC-Jenkins 0d651d6f67 Update translations from Crowdin for de_DE 2025-11-20 00:26:22 +00:00
ZNC-Jenkins 4aa81e07f6 Update translations from Crowdin for 2025-11-15 00:29:28 +00:00
ZNC-Jenkins ea22b297fc Update translations from Crowdin for de_DE nl_NL 2025-11-10 00:26:12 +00:00
ZNC-Jenkins 3427c58246 Update translations from Crowdin for de_DE 2025-11-09 00:26:17 +00:00
ZNC-Jenkins 530b2ac7b8 Update translations from Crowdin for 2025-11-08 00:26:25 +00:00
ZNC-Jenkins 447f503f4c Update translations from Crowdin for pl_PL 2025-10-26 00:26:21 +00:00
ZNC-Jenkins f783c48c52 Update translations from Crowdin for bg_BG 2025-10-08 00:26:36 +00:00
Alexey Sokolov 1c417fda7e Merge pull request #1970 from tmzullinger/1.10.x
modperl: avoid newAV_alloc_x which requires perl >= 5.35.1
2025-08-01 08:14:57 +01:00
Todd Zullinger f28f89720b modperl: avoid newAV_alloc_x which requires perl >= 5.35.1
Use of newAV_alloc_x() was added in a7dffb8f (Add modperl support for
sasl, 2025-03-16), but it has the unintended consequence of increasing
the minimum Perl version a bit more than desired.  Replace it with the
roughly equivalent code as documented in perlapi(1), which can be read
online at <https://perldoc.perl.org/perlapi#newAV>.

Fix #1966
2025-07-31 20:54:20 -04:00
ZNC-Jenkins 69c3471a7e Update translations from Crowdin for bg_BG da_DK de_DE el_GR es_ES fr_FR id_ID it_IT nl_NL pl_PL pt_BR pt_PT ro_RO ru_RU tr_TR 2025-08-01 00:26:05 +00:00
Alexey Sokolov 8c983564e8 Add test for modperl SCString functions.
Pass CClient to the OnClientGetSASLMechanisms callback.

See #1970
2025-07-31 23:47:26 +01:00
Alexey Sokolov 2daae4358a Fix build when part of Boost was found
Fix #1969
Ref #1934
2025-07-24 22:15:16 +01:00
Alexey Sokolov bc75563dee Switch version back to git 1.10.x 2025-07-24 22:14:09 +01:00
Alexey Sokolov f891382570 ZNC 1.10.1 2025-07-24 22:14:09 +01:00
ZNC-Jenkins e3d5c6c87f Update translations from Crowdin for tr_TR 2025-07-08 00:26:11 +00:00
ZNC-Jenkins ee54fb121e Update translations from Crowdin for bg_BG da_DK de_DE el_GR es_ES fr_FR id_ID it_IT nl_NL pl_PL pt_BR pt_PT ro_RO ru_RU tr_TR 2025-06-25 00:26:40 +00:00
Alexey Sokolov 7b3e9c65b7 ZNC 1.10.1-rc1 znc-1.10.1-rc1 2025-06-24 19:22:01 +01:00
Alexey Sokolov af975b2016 Merge pull request #1962 from DarthGandalf/bugs110
Fix several bugs
2025-06-24 18:11:24 +01:00
Alexey Sokolov c46bd41037 Unix listener: chmod and change group
Fix #1955
2025-06-24 09:04:29 +01:00
Alexey Sokolov 4b12c0dc3c Fix nullptr dereference
If client sends TAGMSG while server is not connected
2025-06-23 22:52:34 +01:00
Alexey Sokolov 7b7f691213 Don't store "this" in static variable
Fix #1960

This could also cause use-after-free if the first connected socket disconnects
2025-06-23 22:41:08 +01:00
ZNC-Jenkins 7eaa3048b3 Update translations from Crowdin for tr_TR 2025-06-17 00:26:07 +00:00
ZNC-Jenkins d575543fc4 Update translations from Crowdin for bg_BG da_DK de_DE el_GR es_ES fr_FR id_ID it_IT nl_NL pl_PL pt_BR pt_PT ro_RO ru_RU tr_TR 2025-06-16 00:26:10 +00:00
KindOne a7bfc73749 Save DisableClientCap/DisableServerCap settings.
(cherry picked from commit 0c13b2392f)
2025-06-15 08:08:23 +01:00
ZNC-Jenkins 88099916a2 Update translations from Crowdin for bg_BG da_DK de_DE el_GR es_ES fr_FR id_ID it_IT nl_NL pl_PL pt_BR pt_PT ro_RO ru_RU tr_TR 2025-06-10 00:26:29 +00:00
Alexey Sokolov 543e12cb6a Docker for git version: update alpine to 3.22 2025-06-09 22:29:04 +01:00
Alexey Sokolov 5e3fecbcf1 Update future version to 1.10.1 in the 1.10.x branch 2025-06-09 22:01:20 +01:00
Alexey Sokolov 075cd3897f Increase the version number to 1.10.0 znc-1.10.0 2025-06-09 21:41:36 +01:00
Alexey Sokolov b32d3dbbc9 Fix test on cygwin
Depending on timing between client and server, the initial JOIN can come in either order - in one case forwarding directly from client, in another joining the channels after client disconnected.
2025-06-09 20:20:50 +01:00
Alexey Sokolov d1f26593b3 ZNC 1.10.0-rc1 znc-1.10.0-rc1 2025-05-28 21:15:08 +01:00
Alexey Sokolov e10c874abe ZNC 1.10.0-beta1 2025-05-18 20:30:17 +01:00
Alexey Sokolov 23efef6a5c update csocket
fix #1951
2025-05-17 21:27:57 +01:00
Alexey Sokolov 9a61e6058e Drop old travis config
It hasn't been used for ages
2025-05-17 10:14:14 +01:00
ZNC-Jenkins 0abfd1361c Update translations from Crowdin for bg_BG da_DK de_DE el_GR es_ES fr_FR id_ID it_IT nl_NL pl_PL pt_BR pt_PT ro_RO ru_RU tr_TR 2025-05-12 00:26:03 +00:00
Alexey Sokolov 7108a862fa ZNC 1.10.0-alpha2 2025-05-11 21:28:21 +01:00
Alexey Sokolov 694f50c9c0 Make CTCP flood timer use monotonic time
Probably should use std::chrono types instead of int, but that'll be a later change
2025-05-11 21:24:08 +01:00
Alexey Sokolov 4f65f86ccd Warn user if flood protection is delaying the messages for too long
This should help with cases like #1943
2025-05-11 21:06:21 +01:00
Alexey Sokolov cfd8d3f88d Make PING skip the flood queue just like PONG does
It's unlikely server has nothing to send at all for all the other messages ZNC is sending and that there's nothing happening server-side too. But PING at least is guaranteed to give the response, so ZNC shouldn't disconnect too eagerly
2025-05-11 19:36:53 +01:00
Alexey Sokolov aaeab22ea3 Fix processing of multi-token CAP ACK
I broke it in 5943bc9ed9 while fixing #1950
2025-05-11 18:49:35 +01:00