diff --git a/CMakeLists.txt b/CMakeLists.txt index 7b9ef65da..de9d8e50c 100644 --- a/CMakeLists.txt +++ b/CMakeLists.txt @@ -33,7 +33,7 @@ ENDIF(PREFIX) SET(VERSION_MAJOR "0") SET(VERSION_MINOR "3") -SET(VERSION_PATCH "9.1") +SET(VERSION_PATCH "9.2") SET(VERSION ${VERSION_MAJOR}.${VERSION_MINOR}.${VERSION_PATCH}) SET(LICENSE "GPL3") SET(PKG_STRING "${PROJECT_NAME} ${VERSION}") diff --git a/ChangeLog b/ChangeLog index 05126e421..bcd54eea0 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,9 +1,15 @@ WeeChat ChangeLog ================= Sébastien Helleu -v0.3.9.1, 2012-11-09 +v0.3.9.2, 2012-11-18 +Version 0.3.9.2 (2012-11-18) +---------------------------- + +* core: do not call shell to execute command in hook_process (fix security + problem when a plugin/script gives untrusted command) (bug #37764) + Version 0.3.9.1 (2012-11-09) ---------------------------- diff --git a/NEWS b/NEWS index 17128ffc2..a1769aba0 100644 --- a/NEWS +++ b/NEWS @@ -1,9 +1,15 @@ WeeChat Release Notes ===================== Sébastien Helleu -v0.3.9.1, 2012-11-09 +v0.3.9.2, 2012-11-18 +Version 0.3.9.2 (2012-11-18) +---------------------------- + +This version fixes a security vulnerability when a plugin/script gives untrusted +command to API function "hook_process". + Version 0.3.9.1 (2012-11-09) ---------------------------- diff --git a/configure.in b/configure.in index 2dceef28a..7edeb6aa6 100644 --- a/configure.in +++ b/configure.in @@ -24,10 +24,10 @@ # Process this file with autoconf to produce a configure script. AC_PREREQ(2.56) -AC_INIT(WeeChat, 0.3.9.1, flashcode@flashtux.org) +AC_INIT(WeeChat, 0.3.9.2, flashcode@flashtux.org) AC_CONFIG_SRCDIR([src/core/weechat.c]) AM_CONFIG_HEADER(config.h) -AM_INIT_AUTOMAKE([weechat], [0.3.9.1]) +AM_INIT_AUTOMAKE([weechat], [0.3.9.2]) LICENSE="GPL3" # Checks for programs diff --git a/po/cs.po b/po/cs.po index 99ba3d32a..5b7be587b 100644 --- a/po/cs.po +++ b/po/cs.po @@ -18,10 +18,10 @@ # msgid "" msgstr "" -"Project-Id-Version: WeeChat 0.3.9.1\n" +"Project-Id-Version: WeeChat 0.3.9.2\n" "Report-Msgid-Bugs-To: flashcode@flashtux.org\n" "POT-Creation-Date: 2012-09-29 09:37+0200\n" -"PO-Revision-Date: 2012-11-09 18:36+0100\n" +"PO-Revision-Date: 2012-11-18 10:51+0100\n" "Last-Translator: Jiri Golembiovsky \n" "Language-Team: weechat-dev \n" "Language: Czech\n" diff --git a/po/de.po b/po/de.po index 3886e46b4..b33ebd457 100644 --- a/po/de.po +++ b/po/de.po @@ -21,10 +21,10 @@ # nils, 2012. msgid "" msgstr "" -"Project-Id-Version: WeeChat 0.3.9.1\n" +"Project-Id-Version: WeeChat 0.3.9.2\n" "Report-Msgid-Bugs-To: flashcode@flashtux.org\n" "POT-Creation-Date: 2012-09-29 09:37+0200\n" -"PO-Revision-Date: 2012-11-09 18:36+0100\n" +"PO-Revision-Date: 2012-11-18 10:51+0100\n" "Last-Translator: Nils Görs \n" "Language-Team: German \n" "Language: \n" diff --git a/po/es.po b/po/es.po index 96560ff25..e46d64a59 100644 --- a/po/es.po +++ b/po/es.po @@ -20,10 +20,10 @@ # msgid "" msgstr "" -"Project-Id-Version: WeeChat 0.3.9.1\n" +"Project-Id-Version: WeeChat 0.3.9.2\n" "Report-Msgid-Bugs-To: flashcode@flashtux.org\n" "POT-Creation-Date: 2012-09-29 09:37+0200\n" -"PO-Revision-Date: 2012-11-09 18:36+0100\n" +"PO-Revision-Date: 2012-11-18 10:51+0100\n" "Last-Translator: Elián Hanisch \n" "Language-Team: weechat-dev \n" "Language: Spanish\n" diff --git a/po/fr.po b/po/fr.po index 8fee4167e..ff6222272 100644 --- a/po/fr.po +++ b/po/fr.po @@ -19,10 +19,10 @@ # msgid "" msgstr "" -"Project-Id-Version: WeeChat 0.3.9.1\n" +"Project-Id-Version: WeeChat 0.3.9.2\n" "Report-Msgid-Bugs-To: flashcode@flashtux.org\n" "POT-Creation-Date: 2012-09-29 09:37+0200\n" -"PO-Revision-Date: 2012-11-09 18:36+0100\n" +"PO-Revision-Date: 2012-11-18 10:51+0100\n" "Last-Translator: Sebastien Helleu \n" "Language-Team: weechat-dev \n" "Language: French\n" diff --git a/po/hu.po b/po/hu.po index 1b7a699b7..ab93e8a97 100644 --- a/po/hu.po +++ b/po/hu.po @@ -18,10 +18,10 @@ # msgid "" msgstr "" -"Project-Id-Version: WeeChat 0.3.9.1\n" +"Project-Id-Version: WeeChat 0.3.9.2\n" "Report-Msgid-Bugs-To: flashcode@flashtux.org\n" "POT-Creation-Date: 2012-09-29 09:37+0200\n" -"PO-Revision-Date: 2012-11-09 18:36+0100\n" +"PO-Revision-Date: 2012-11-18 10:51+0100\n" "Last-Translator: Andras Voroskoi \n" "Language-Team: weechat-dev \n" "Language: Hungarian\n" diff --git a/po/it.po b/po/it.po index d2747629d..b65be0a8d 100644 --- a/po/it.po +++ b/po/it.po @@ -18,10 +18,10 @@ # msgid "" msgstr "" -"Project-Id-Version: WeeChat 0.3.9.1\n" +"Project-Id-Version: WeeChat 0.3.9.2\n" "Report-Msgid-Bugs-To: flashcode@flashtux.org\n" "POT-Creation-Date: 2012-09-29 09:37+0200\n" -"PO-Revision-Date: 2012-11-09 18:36+0100\n" +"PO-Revision-Date: 2012-11-18 10:51+0100\n" "Last-Translator: Marco Paolone \n" "Language-Team: weechat-dev \n" "Language: Italian\n" diff --git a/po/ja.po b/po/ja.po index 8f79f54fd..c7277b26c 100644 --- a/po/ja.po +++ b/po/ja.po @@ -18,10 +18,10 @@ # msgid "" msgstr "" -"Project-Id-Version: WeeChat 0.3.9.1\n" +"Project-Id-Version: WeeChat 0.3.9.2\n" "Report-Msgid-Bugs-To: flashcode@flashtux.org\n" "POT-Creation-Date: 2012-09-29 09:37+0200\n" -"PO-Revision-Date: 2012-11-09 18:36+0100\n" +"PO-Revision-Date: 2012-11-18 10:51+0100\n" "Last-Translator: AYANOKOUZI, Ryuunosuke \n" "Language-Team: Japanese \n" "Language: ja\n" diff --git a/po/pl.po b/po/pl.po index 16a9fccf1..85eafac01 100644 --- a/po/pl.po +++ b/po/pl.po @@ -19,10 +19,10 @@ # msgid "" msgstr "" -"Project-Id-Version: WeeChat 0.3.9.1\n" +"Project-Id-Version: WeeChat 0.3.9.2\n" "Report-Msgid-Bugs-To: flashcode@flashtux.org\n" "POT-Creation-Date: 2012-09-29 09:37+0200\n" -"PO-Revision-Date: 2012-11-09 18:36+0100\n" +"PO-Revision-Date: 2012-11-18 10:51+0100\n" "Last-Translator: Krzysztof Korościk \n" "Language-Team: weechat-dev \n" "Language: Polish\n" diff --git a/po/pt_BR.po b/po/pt_BR.po index a19812b0e..7c79475ac 100644 --- a/po/pt_BR.po +++ b/po/pt_BR.po @@ -19,10 +19,10 @@ # msgid "" msgstr "" -"Project-Id-Version: WeeChat 0.3.9.1\n" +"Project-Id-Version: WeeChat 0.3.9.2\n" "Report-Msgid-Bugs-To: flashcode@flashtux.org\n" "POT-Creation-Date: 2012-09-29 09:37+0200\n" -"PO-Revision-Date: 2012-11-09 18:36+0100\n" +"PO-Revision-Date: 2012-11-18 10:51+0100\n" "Last-Translator: Sergio Durigan Junior \n" "Language-Team: weechat-dev \n" "Language: Portuguese\n" diff --git a/po/ru.po b/po/ru.po index 2073acff7..e082fe570 100644 --- a/po/ru.po +++ b/po/ru.po @@ -19,10 +19,10 @@ # msgid "" msgstr "" -"Project-Id-Version: WeeChat 0.3.9.1\n" +"Project-Id-Version: WeeChat 0.3.9.2\n" "Report-Msgid-Bugs-To: flashcode@flashtux.org\n" "POT-Creation-Date: 2012-09-29 09:37+0200\n" -"PO-Revision-Date: 2012-11-09 18:36+0100\n" +"PO-Revision-Date: 2012-11-18 10:51+0100\n" "Last-Translator: Aleksey V Zapparov AKA ixti \n" "Language-Team: weechat-dev \n" "Language: Russian\n" diff --git a/weechat.spec b/weechat.spec index 18ea8a6c1..a4b31f357 100644 --- a/weechat.spec +++ b/weechat.spec @@ -23,7 +23,7 @@ # %define name weechat -%define version 0.3.9.1 +%define version 0.3.9.2 %define release 1 Name: %{name} @@ -73,6 +73,8 @@ rm -rf $RPM_BUILD_ROOT %{_includedir}/%{name}/weechat-plugin.h %changelog +* Sun Nov 18 2012 Sebastien Helleu 0.3.9.2-1 +- Released version 0.3.9.2 * Fri Nov 09 2012 Sebastien Helleu 0.3.9.1-1 - Released version 0.3.9.1 * Sat Sep 29 2012 Sebastien Helleu 0.3.9-1