adam/znc
1
0
Fork 0
mirror of https://github.com/znc/znc.git synced 2026-07-21 09:03:32 +02:00
Code Issues Packages Projects Releases Wiki Activity

ZNC 1.9.1

Browse Source
This commit is contained in:
Alexey Sokolov
2024-07-03 10:04:00 +01:00
parent 8cbf8d6281
commit ae353acf2f
2 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.md
+8
View File
@@ -1,3 +1,11 @@
# ZNC 1.9.1 (2024-07-03)
* This is a security release to fix CVE-2024-39844: remote code execution vulnerability in modtcl.
* To mitigate this for existing installations, simply unload the modtcl module for every user, if it's loaded. Note that only users with admin rights can load modtcl at all.
* Thanks to Johannes Kuhn (DasBrain) for reporting, to glguy for the patch, and to multiple IRC network operators for help with mitigating this on server side before disclosure.
* Improve tooltips in webadmin.
# ZNC 1.9.0 (2024-02-22)
## New