v1.1.1 - a security update
Oragono 1.1.1 is a bugfix release for flaws in message handling, including one with security implications.
Many thanks to @streaps for reporting issues.
Upgrade notes
This release does not change the database or configuration file format.
Security
- Previous releases of Oragono would incorrectly relay chat messages containing the
\r
byte. An attacker could use this to spoof protocol messages from the server (depending on the implementation of the victim's client). This has been fixed. (#610)