WeeChat :: documentation

Security vulnerabilities

This page lists vulnerabilities by version (click on a version for the detail of all issues).

Version 4.2.2 (Apr 7, 2024)

No known security vulnerabilities.

Version 4.2.1 (Jan 22, 2024)

No known security vulnerabilities.

Version 4.2.0 (Jan 21, 2024)

No known security vulnerabilities.

Version 4.0.8 (Jan 20, 2024)

No known security vulnerabilities.

Version 4.1.3 (Jan 20, 2024)

No known security vulnerabilities.

Version 4.1.2 (Dec 3, 2023)

No known security vulnerabilities.

Version 4.0.7 (Dec 3, 2023)

No known security vulnerabilities.

Version 4.1.1 (Oct 26, 2023)

No known security vulnerabilities.

Version 4.0.6 (Oct 26, 2023)

No known security vulnerabilities.

Version 4.1.0 (Oct 15, 2023)

No known security vulnerabilities.

Version 4.0.5 (Sep 24, 2023)

No known security vulnerabilities.

Version 4.0.4 (Aug 22, 2023)

No known security vulnerabilities.

Version 4.0.3 (Aug 8, 2023)

No known security vulnerabilities.

Version 4.0.2 (Jul 12, 2023)

No known security vulnerabilities.

Version 4.0.1 (Jun 30, 2023)

No known security vulnerabilities.

Version 4.0.0 (Jun 24, 2023)

No known security vulnerabilities.

Version 3.8 (Jan 8, 2023)

No known security vulnerabilities.

Version 3.7.1 (Oct 21, 2022)

No known security vulnerabilities.

Version 3.7 (Oct 9, 2022)

No known security vulnerabilities.

Version 3.6 (Jul 10, 2022)

No known security vulnerabilities.

Version 3.5 (Mar 27, 2022)

No known security vulnerabilities.

Version 3.4.1 (Mar 13, 2022)

No known security vulnerabilities.

Version 3.4 (Dec 18, 2021)

WSA-2022-1: [IRC, Plugins] Possible man-in-the-middle attack in TLS connection to servers. — Fixed in version 3.4.1 (Mar 13, 2022).

Version 3.3 (Sep 19, 2021)

WSA-2022-1: [IRC, Plugins] Possible man-in-the-middle attack in TLS connection to servers. — Fixed in version 3.4.1 (Mar 13, 2022).

Version 3.2.1 (Sep 4, 2021)

WSA-2022-1: [IRC, Plugins] Possible man-in-the-middle attack in TLS connection to servers. — Fixed in version 3.4.1 (Mar 13, 2022).

Version 3.2 (Jun 13, 2021)

WSA-2022-1: [IRC, Plugins] Possible man-in-the-middle attack in TLS connection to servers. — Fixed in version 3.4.1 (Mar 13, 2022).
WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).

Version 3.1 (Mar 7, 2021)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).

Version 3.0.1 (Jan 31, 2021)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).

Version 3.0 (Nov 11, 2020)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).

Version 2.9 (Jul 18, 2020)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).

Version 2.8 (Mar 29, 2020)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).

Version 2.7.1 (Feb 20, 2020)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).

Version 2.7 (Dec 8, 2019)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).

Version 2.6 (Sep 8, 2019)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).

Version 2.5 (Jun 6, 2019)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).

Version 2.4 (Feb 17, 2019)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).

Version 2.3 (Oct 21, 2018)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).

Version 2.2 (Jul 14, 2018)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).

Version 2.1 (Mar 18, 2018)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).

Version 2.0.1 (Dec 20, 2017)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).

Version 2.0 (Dec 3, 2017)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).

Version 1.9.1 (Sep 23, 2017)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).

Version 1.9 (Jun 25, 2017)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).

Version 1.8 (May 13, 2017)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).

Version 1.7.1 (Apr 22, 2017)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).

Version 1.7 (Jan 15, 2017)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).

Version 1.6 (Oct 2, 2016)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).

Version 1.5 (May 1, 2016)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).

Version 1.4 (Jan 10, 2016)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).

Version 1.3 (Aug 16, 2015)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).

Version 1.2 (May 10, 2015)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).

Version 1.1.1 (Jan 25, 2015)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).

Version 1.1 (Jan 11, 2015)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).

Version 1.0.1 (Sep 28, 2014)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).

Version 1.0 (Aug 15, 2014)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).

Version 0.4.3 (Feb 9, 2014)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).

Version 0.4.2 (Oct 6, 2013)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).

Version 0.4.1 (May 20, 2013)

WSA-2021-1: [Relay] Crash on malformed websocket frame in relay plugin. — Fixed in version 3.2.1 (Sep 4, 2021).
WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).

Version 0.4.0 (Jan 20, 2013)

WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-2: [IRC] Crash on malformed IRC message 352 (WHO). — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).
WSA-2013-3: [Relay] Crash on IRC commands sent via Relay. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2013-1: [IRC] Crash on nicks monitored with /notify. — Fixed in version 0.4.1 (May 18, 2013).

Version 0.3.9.2 (Nov 18, 2012)

WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).
WSA-2013-3: [Relay] Crash on IRC commands sent via Relay. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2013-1: [IRC] Crash on nicks monitored with /notify. — Fixed in version 0.4.1 (May 18, 2013).

Version 0.3.9.1 (Nov 9, 2012)

WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).
WSA-2013-3: [Relay] Crash on IRC commands sent via Relay. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2013-1: [IRC] Crash on nicks monitored with /notify. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2012-2: [API] Remote execution of commands via scripts. — Fixed in version 0.3.9.2 (Nov 18, 2012).

Version 0.3.9 (Sep 29, 2012)

WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).
WSA-2013-3: [Relay] Crash on IRC commands sent via Relay. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2013-1: [IRC] Crash on nicks monitored with /notify. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2012-2: [API] Remote execution of commands via scripts. — Fixed in version 0.3.9.2 (Nov 18, 2012).
WSA-2012-1: [IRC] Crash when decoding IRC colors. — Fixed in version 0.3.9.1 (Nov 9, 2012).

Version 0.3.8 (Jun 3, 2012)

WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2020-1: [IRC] Buffer overflow on malformed IRC message 324 (channel mode). — Fixed in version 2.7.1 (Feb 8, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).
WSA-2013-3: [Relay] Crash on IRC commands sent via Relay. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2013-1: [IRC] Crash on nicks monitored with /notify. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2012-2: [API] Remote execution of commands via scripts. — Fixed in version 0.3.9.2 (Nov 18, 2012).
WSA-2012-1: [IRC] Crash when decoding IRC colors. — Fixed in version 0.3.9.1 (Nov 9, 2012).

Version 0.3.7 (Feb 26, 2012)

WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).
WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2013-1: [IRC] Crash on nicks monitored with /notify. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2012-2: [API] Remote execution of commands via scripts. — Fixed in version 0.3.9.2 (Nov 18, 2012).
WSA-2012-1: [IRC] Crash when decoding IRC colors. — Fixed in version 0.3.9.1 (Nov 9, 2012).

Version 0.3.6 (Oct 22, 2011)

WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).
WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2013-1: [IRC] Crash on nicks monitored with /notify. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2012-2: [API] Remote execution of commands via scripts. — Fixed in version 0.3.9.2 (Nov 18, 2012).
WSA-2012-1: [IRC] Crash when decoding IRC colors. — Fixed in version 0.3.9.1 (Nov 9, 2012).

Version 0.3.5 (May 15, 2011)

WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).
WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2012-2: [API] Remote execution of commands via scripts. — Fixed in version 0.3.9.2 (Nov 18, 2012).

Version 0.3.4 (Jan 16, 2011)

WSA-2020-3: [IRC] Buffer overflow on new IRC message 005 with nick prefixes. — Fixed in version 2.7.1 (Feb 10, 2020).
WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).
WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2012-2: [API] Remote execution of commands via scripts. — Fixed in version 0.3.9.2 (Nov 18, 2012).
WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.3.3 (Aug 7, 2010)

WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2017-1: [IRC] Buffer overflow when receiving a DCC file. — Fixed in version 1.7.1 (Apr 22, 2017).
WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2012-2: [API] Remote execution of commands via scripts. — Fixed in version 0.3.9.2 (Nov 18, 2012).
WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.3.2 (Apr 18, 2010)

WSA-2017-2: [Logger] Use of invalid pointer in build of log filename. — Fixed in version 1.9.1 (Sep 23, 2017).
WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2012-2: [API] Remote execution of commands via scripts. — Fixed in version 0.3.9.2 (Nov 18, 2012).
WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.3.1.1 (Jan 31, 2010)

WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2012-2: [API] Remote execution of commands via scripts. — Fixed in version 0.3.9.2 (Nov 18, 2012).
WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.3.1 (Jan 23, 2010)

WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2012-2: [API] Remote execution of commands via scripts. — Fixed in version 0.3.9.2 (Nov 18, 2012).
WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.3.0 (Sep 6, 2009)

WSA-2013-2: [IRC] Crash on send of unknown commands to IRC server. — Fixed in version 0.4.1 (May 18, 2013).
WSA-2012-2: [API] Remote execution of commands via scripts. — Fixed in version 0.3.9.2 (Nov 18, 2012).
WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.2.6.3 (Jun 13, 2009)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.2.6.2 (Apr 18, 2009)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.2.6.1 (Mar 14, 2009)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.2.6 (Sep 6, 2007)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).
WSA-2009-1: [IRC] Crash when receiving WeeChat color codes in IRC messages. — Fixed in version 0.2.6.1 (Mar 14, 2009).

Version 0.2.5 (Jun 7, 2007)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.2.4 (Mar 29, 2007)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.2.3 (Jan 10, 2007)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.2.2 (Jan 6, 2007)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.2.1 (Oct 1, 2006)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.2.0 (Aug 19, 2006)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.1.9 (May 25, 2006)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.1.8 (Mar 18, 2006)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.1.7 (Jan 14, 2006)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).

Version 0.1.6 (Nov 11, 2005)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).
WSA-2006-1: [API] Crash in API function infobar_printf. — Fixed in version 0.1.7 (Jan 14, 2006).

Version 0.1.5 (Sep 24, 2005)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).
WSA-2006-1: [API] Crash in API function infobar_printf. — Fixed in version 0.1.7 (Jan 14, 2006).

Version 0.1.4 (Jul 30, 2005)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).
WSA-2006-1: [API] Crash in API function infobar_printf. — Fixed in version 0.1.7 (Jan 14, 2006).

Version 0.1.3 (Jul 2, 2005)

WSA-2011-1: [IRC] Possible man-in-the-middle attack in TLS connection to IRC server. — Fixed in version 0.3.5 (May 15, 2011).
WSA-2006-1: [API] Crash in API function infobar_printf. — Fixed in version 0.1.7 (Jan 14, 2006).

Version 0.1.2 (May 21, 2005)

WSA-2006-1: [API] Crash in API function infobar_printf. — Fixed in version 0.1.7 (Jan 14, 2006).

Version 0.1.1 (Mar 20, 2005)

WSA-2006-1: [API] Crash in API function infobar_printf. — Fixed in version 0.1.7 (Jan 14, 2006).

Version 0.1.0 (Feb 12, 2005)

WSA-2006-1: [API] Crash in API function infobar_printf. — Fixed in version 0.1.7 (Jan 14, 2006).

Version 0.0.9 (Jan 1, 2005)

WSA-2006-1: [API] Crash in API function infobar_printf. — Fixed in version 0.1.7 (Jan 14, 2006).

Version 0.0.8 (Oct 30, 2004)

WSA-2006-1: [API] Crash in API function infobar_printf. — Fixed in version 0.1.7 (Jan 14, 2006).

Version 0.0.7 (Aug 8, 2004)

WSA-2006-1: [API] Crash in API function infobar_printf. — Fixed in version 0.1.7 (Jan 14, 2006).

Version 0.0.6 (Jun 5, 2004)

WSA-2006-1: [API] Crash in API function infobar_printf. — Fixed in version 0.1.7 (Jan 14, 2006).

Version 0.0.5 (Feb 7, 2004)

WSA-2006-1: [API] Crash in API function infobar_printf. — Fixed in version 0.1.7 (Jan 14, 2006).

Version 0.0.4 (Jan 1, 2004)

WSA-2004-1: [Core, IRC] Buffer overflows in build of strings. — Fixed in version 0.0.5 (Feb 7, 2004).

Version 0.0.3 (Nov 3, 2003)

WSA-2004-1: [Core, IRC] Buffer overflows in build of strings. — Fixed in version 0.0.5 (Feb 7, 2004).

Version 0.0.2 (Oct 5, 2003)

WSA-2004-1: [Core, IRC] Buffer overflows in build of strings. — Fixed in version 0.0.5 (Feb 7, 2004).

Version 0.0.1 (Sep 27, 2003)

WSA-2004-1: [Core, IRC] Buffer overflows in build of strings. — Fixed in version 0.0.5 (Feb 7, 2004).