ergochat/ergo v1.1.1

v1.1.1 - a security update

on GitHub

Oragono 1.1.1 is a bugfix release for flaws in message handling, including one with security implications.

Many thanks to @streaps for reporting issues.

Upgrade notes

This release does not change the database or configuration file format.

Security

• Previous releases of Oragono would incorrectly relay chat messages containing the \r byte. An attacker could use this to spoof protocol messages from the server (depending on the implementation of the victim's client). This has been fixed. (#610)

Fixed

• Fixed incorrect rejection of messages with multiple spaces (#602, thanks @streaps!)