|
@@ -1,7 +1,7 @@
|
1
|
1
|
# Changelog
|
2
|
2
|
All notable changes to Oragono will be documented in this file.
|
3
|
3
|
|
4
|
|
-## [1.1.1] - 2019-07-15
|
|
4
|
+## [1.1.1] - 2019-07-21
|
5
|
5
|
Oragono 1.1.1 is a bugfix release for flaws in message handling, including one with security implications.
|
6
|
6
|
|
7
|
7
|
Many thanks to [@streaps](https://github.com/streaps) for reporting issues.
|
|
@@ -11,7 +11,7 @@ Many thanks to [@streaps](https://github.com/streaps) for reporting issues.
|
11
|
11
|
This release does not change the database or configuration file format.
|
12
|
12
|
|
13
|
13
|
### Security
|
14
|
|
-* Previous releases of Oragono would incorrectly relay chat messages containing the `\r` byte. An attacker could use this to spoof protocol messages from the server (depending on the implementation of the victim's client). This has been fixed.
|
|
14
|
+* Previous releases of Oragono would incorrectly relay chat messages containing the `\r` byte. An attacker could use this to spoof protocol messages from the server (depending on the implementation of the victim's client). This has been fixed. (#610)
|
15
|
15
|
|
16
|
16
|
### Fixed
|
17
|
17
|
* Fixed incorrect rejection of messages with multiple spaces (#602, thanks [@streaps](https://github.com/streaps)!)
|