mirror of
https://github.com/ergochat/ergo.git
synced 2024-12-25 20:22:38 +01:00
import v1.1.1 changelog
This commit is contained in:
parent
d6b55c17d8
commit
0d635ce5c3
14
CHANGELOG.md
14
CHANGELOG.md
@ -16,6 +16,20 @@ New release of Oragono!
|
||||
|
||||
### Fixed
|
||||
|
||||
## [1.1.1] - 2019-07-21
|
||||
Oragono 1.1.1 is a bugfix release for flaws in message handling, including one with security implications.
|
||||
|
||||
Many thanks to [@streaps](https://github.com/streaps) for reporting issues.
|
||||
|
||||
### Upgrade notes
|
||||
|
||||
This release does not change the database or configuration file format.
|
||||
|
||||
### Security
|
||||
* Previous releases of Oragono would incorrectly relay chat messages containing the `\r` byte. An attacker could use this to spoof protocol messages from the server (depending on the implementation of the victim's client). This has been fixed. (#610)
|
||||
|
||||
### Fixed
|
||||
* Fixed incorrect rejection of messages with multiple spaces (#602, thanks [@streaps](https://github.com/streaps)!)
|
||||
|
||||
## [1.1.0] - 2019-06-27
|
||||
We're pleased to announce Oragono version 1.1.0. This version has a number of exciting improvements, including:
|
||||
|
Loading…
Reference in New Issue
Block a user