gobolinux/Recipes

Please remove XChat

Closed this issue · 1 comments

XChat has not had a release in a decade and has had no SVN changes since 2013.

XChat also has several unfixed security issues including but not limited to CVE-2013-7449 and CVE-2011-5129. Additionally, it only supports SSLv3 (no TLSv1+) which is disabled by modern IRC servers so it can not be used securely and has a bug which prevents it from reading messages sent by the current stable branch of InspIRCd.

A fork of XChat called HexChat exists and is already packaged. Most distributions have switched to this already.

@SadieCat thanks for the heads up! I removed it from the current master. I figured that if anyone needs to check it for historical reasons, they can look at the Git history.