Prep for 0.85 security release

djabberd · Jun 13, 2011 · 7e212c9 · 7e212c9
1 parent b41d6dc
commit 7e212c9
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/CHANGES b/CHANGES
@@ -1,3 +1,8 @@
+0.85 2011-06-13 *CRITICAL SECURITY RELEASE*
+ - Fix an XML entity injection attack allowing the attacker to read random files
+ from the server. Reported by Wouter Coekaerts <[email protected]>.
+ (Yann Kerherve <[email protected]>)
+
  - Support intermediate SSL certificates.
  (Rajiv Aaron Manglani <[email protected]>)
 

diff --git a/lib/DJabberd.pm b/lib/DJabberd.pm
@@ -42,7 +42,7 @@ use Socket qw(IPPROTO_TCP TCP_NODELAY SOL_SOCKET SOCK_STREAM);
 use Carp qw(croak);
 use DJabberd::Util qw(tsub as_bool as_num as_abs_path as_bind_addr);
 
-our $VERSION = '0.84';
+our $VERSION = '0.85';
 
 our $logger = DJabberd::Log->get_logger();
 our $hook_logger = DJabberd::Log->get_logger("DJabberd::Hook");