To create new wiki account, please join us on #znc at Libera.Chat and ask admins to create a wiki account for you. You can say thanks to spambots for this inconvenience.
ChangeLog/1.7.1: Difference between revisions
Jump to navigation
Jump to search
DarthGandalf (talk | contribs) |
m minor grammatical changes |
||
| (2 intermediate revisions by one other user not shown) | |||
| Line 5: | Line 5: | ||
--> | --> | ||
<!-- Last update at | <!-- Last update at 9e4d89aaa4e2b6e5c79600b93665c1c0e0bb5255 --> | ||
== Security critical fixes == | |||
* {{CVE|2018-14055}}: non-admin user could gain admin privileges and shell access by injecting values into <code>znc.conf</code>. | |||
* {{CVE|2018-14056}}: path traversal in HTTP handler via <code>../</code> in a web skin name. | |||
== Core == | |||
* Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build {{GH|1536}} | |||
* Fix language selector. Russian and German were both not selectable. | |||
* Fix build without SSL support {{GH|1554}} | |||
* Fix several broken strings | |||
* Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. {{GH|1541}} | |||
== New == | == New == | ||
* Add partial Spanish and | * Add partial Spanish, Indonesian, and Dutch translations {{GH|1527}} {{GH|1550}} {{GH|1572}} | ||
== Modules == | == Modules == | ||
* [[adminlog]]: Log the error message again (regression of 1.7.0) {{GH|1557}} | |||
* [[admindebug]]: New module, which allows admins to turn on/off --debug in runtime {{GH|1556}} | |||
* [[flooddetach]]: Fix description of commands {{GH|1548}} | |||
* [[modperl]]: Fix memory leak in NV handling | |||
* [[modperl]]: Fix functions which return <code>VCString</code> {{GH|1543}} | |||
* [[modpython]]: Fix functions which return <code>VCString</code> {{GH|1543}} | |||
* [[webadmin]]: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled | |||
== Internal == | == Internal == | ||
* Deprecate one of the overloads of <code>CMessage::GetParams()</code>, rename it to <code>CMessage::GetParamsColon()</code> | |||
* Don't throw from destructor in the integration test | |||
* Fix a warning with integration test / gmake / znc-buildmod interaction. | |||
Latest revision as of 21:30, 17 July 2018
| ← 1.7.0 | ZNC 1.7.1 | 1.7.2 → |
 |
This is an old ZNC version. If you still use it, please consider upgrading to 1.9.1. |
Security critical fixes
- CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into
znc.conf. - CVE-2018-14056: path traversal in HTTP handler via
../in a web skin name.
Core
- Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
- Fix language selector. Russian and German were both not selectable.
- Fix build without SSL support (#1554)
- Fix several broken strings
- Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
New
Modules
- adminlog: Log the error message again (regression of 1.7.0) (#1557)
- admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
- flooddetach: Fix description of commands (#1548)
- modperl: Fix memory leak in NV handling
- modperl: Fix functions which return
VCString(#1543) - modpython: Fix functions which return
VCString(#1543) - webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
Internal
- Deprecate one of the overloads of
CMessage::GetParams(), rename it toCMessage::GetParamsColon() - Don't throw from destructor in the integration test
- Fix a warning with integration test / gmake / znc-buildmod interaction.