DMDirc Cleanup
Chris of the DMDirc team has announced that there has been several improvements to there homepage as well as the move away from the google code repositories due to
poor services provided by google. This change comes complete with a whole new site which is looking fantastic. The announcement reads like so:
As you may have noticed if you're a regular visitor, the DMDirc website has recently been given a lick of paint. There is now a common header across all of the DMDirc sites (the main website, addons site, bug tracker and blog), which allows easy navigation between all aspects of the DMDirc website, and is a lot better looking than the old header, too!
DMDirc 0.5.6 Released
A new version of DMDirc has been released to address a security issue found in the previous release as well as nightly builds. The announcement from
the DMDirc homepage urges all users to upgrade as promptly as possible as this issue effects all minor to current versions.
The announcment itself reads like this:
A security vulnerability has been discovered in DMDirc. The implementation of URL handlers allow specially crafted URLs to execute arbitrary programs on the host system. Only custom URL handlers (those listed as "custom commands" in the 'URL Handlers' section of the preferences panel) are vulnerable, and the user has to click on a malicious URL in order for the vulnerability to be exploited. The DMDirc developers have only been successful in using the vulnerability to launch argument-less programs on Linux, but we cannot guarantee that other platforms are not affected.
We have backported the fix for the exploit to the DMDirc 0.5 tree, and DMDirc 0.5.6 has now been released. We highly recommend that anyone using DMDirc 0.5.5 upgrade to DMDirc 0.5.6. Nightly builds of DMDirc up to and including the build released on the 22nd of May (designated revision 4055) are also vulnerable. A nightly build containing the vulnerability fix will be available for download tonight, and we highly recommend that anyone using DMDirc nightly builds upgrade as soon as it is available.
