DMDirc Development Blog » News http://blog.dmdirc.com DMDirc Development Blog Sun, 31 Aug 2008 21:35:52 +0000 http://wordpress.org/?v=2.6.1 en URL handling vulnerability; DMDirc 0.5.6 released http://blog.dmdirc.com/2008/05/22/url-handling-vulnerability-dmdirc-056-released/ http://blog.dmdirc.com/2008/05/22/url-handling-vulnerability-dmdirc-056-released/#comments Thu, 22 May 2008 19:20:47 +0000 Chris http://blog.dmdirc.com/?p=51 A security vulnerability has been discovered in DMDirc. The implementation of URL handlers allow specially crafted URLs to execute arbitrary programs on the host system. Only custom URL handlers (those listed as “custom commands” in the ‘URL Handlers’ section of the preferences panel) are vulnerable, and the user has to click on a malicious URL in order for the vulnerability to be exploited. The DMDirc developers have only been successful in using the vulnerability to launch argument-less programs on Linux, but we cannot guarantee that other platforms are not affected.

We have backported the fix for the exploit to the DMDirc 0.5 tree, and DMDirc 0.5.6 has now been released. We highly recommend that anyone using DMDirc 0.5.5 upgrade to DMDirc 0.5.6. Nightly builds of DMDirc up to and including the build released on the 22nd of May (designated revision 4055) are also vulnerable. A nightly build containing the vulnerability fix will be available for download tonight, and we highly recommend that anyone using DMDirc nightly builds upgrade as soon as it is available.

DMDirc 0.5.6 may be downloaded directly using the following links: Windows installer, Linux installer, Jar file.

If you have any questions, please feel free to join us in #DMDirc on Quakenet (irc.quakenet.org), or leave a comment here.

]]> http://blog.dmdirc.com/2008/05/22/url-handling-vulnerability-dmdirc-056-released/feed/ Website and subversion changes http://blog.dmdirc.com/2008/04/10/website-and-subversion-changes/ http://blog.dmdirc.com/2008/04/10/website-and-subversion-changes/#comments Thu, 10 Apr 2008 19:17:45 +0000 Chris http://blog.dmdirc.com/?p=50 As you may have noticed if you’re a regular visitor, the DMDirc website has recently been given a lick of paint. There is now a common header across all of the DMDirc sites (the main website, addons site, bug tracker and blog), which allows easy navigation between all aspects of the DMDirc website, and is a lot better looking than the old header, too!

We have also relocated our subversion repository from its previous home at Google’s Project Hosting service, to our own server. We made this switch because of the fairly poor uptime of Google’s offering, and the seemingly random delays between commits being made and announcement e-mails being sent. If you have the DMDirc source code checked out from our subversion repository, follow the instructions here to migrate to the new repository.

]]> http://blog.dmdirc.com/2008/04/10/website-and-subversion-changes/feed/ DMDirc 0.5.5 Released http://blog.dmdirc.com/2008/01/30/dmdirc-055-released/ http://blog.dmdirc.com/2008/01/30/dmdirc-055-released/#comments Wed, 30 Jan 2008 05:41:57 +0000 Shane http://blog.dmdirc.com/2008/01/30/dmdirc-055-released/ We have just released version 0.5.5 of DMDirc. This release is an interim release between 0.5.1 and 0.6 to get some important features of 0.6 in use in the stable version.

Some of the main changes include:

  • The new launchers which give the client the ability to update itself via the updater
  • URL Handler to allow adding support for non-http links (Eg steam://, ftp://)
  • Much improved plugin system (Plugins are now stored in jar files rather than loads of .class files)
  • Many more, read the changelog for a full list.

The installer for DMDirc 0.5.5 can be downloaded for Windows or Linux.

]]> http://blog.dmdirc.com/2008/01/30/dmdirc-055-released/feed/ DMDirc 0.5.1 released http://blog.dmdirc.com/2007/10/07/dmdirc-051-released/ http://blog.dmdirc.com/2007/10/07/dmdirc-051-released/#comments Sun, 07 Oct 2007 21:32:46 +0000 greboid http://blog.dmdirc.com/2007/10/07/dmdirc-051-released/ We have just released version 0.5.1 of DMDirc. This is mainly a bug fix release with a couple of minor 0.6 improvements included, see the changelog for more information.

The installer for DMDirc 0.5.1 can be downloaded for Windows or Linux.

]]> http://blog.dmdirc.com/2007/10/07/dmdirc-051-released/feed/ DMDirc 0.5 released http://blog.dmdirc.com/2007/09/26/dmdirc-05-released/ http://blog.dmdirc.com/2007/09/26/dmdirc-05-released/#comments Wed, 26 Sep 2007 15:28:58 +0000 greboid http://blog.dmdirc.com/2007/09/26/39/ We have just released version 0.5 of DMDirc.

0.5 has just under 100 features or improvements and 77 bug fixes since 0.4, the major additions in 0.5 are

* Added action wrappers for aliases and performs
* Added intelligent tab completion for commands
* Added server settings dialog
* Added support for themes
* Added support for character transcoding
* Added support for various command-line options
* Added installers for Windows and Linux

See the changelog for more information on this release. As always we recommend existing users to upgrade, and non-users to give it a go, come visit us in #DMDirc on Quakenet (see the help menu) with your feedback or just to visit.

0.5 can be downloaded for windows and linux

]]> http://blog.dmdirc.com/2007/09/26/dmdirc-05-released/feed/ 0.4 is a go! http://blog.dmdirc.com/2007/06/11/04-is-a-go/ http://blog.dmdirc.com/2007/06/11/04-is-a-go/#comments Mon, 11 Jun 2007 03:28:40 +0000 Shane http://blog.dmdirc.com/2007/06/11/04-is-a-go/ We have just released version 0.4 of DMDirc :) (Applause).

0.4 Brings many improvements over previous versions, with over 500 svn commits since 0.3, 0.4 includes amongst other things:

  • The actions system (See these two blog posts)
  • The plugins system (See this blog post)
  • Completely new, faster, text pane
  • Searching
  • Over 100 improvements bug fixes

See the changelog and readme for more information on this release. We encourage existing users to upgrade, and non-users to give it a go, and let us know in #DMDirc on Quakenet what you think :)

0.4 can be downloaded here

]]> http://blog.dmdirc.com/2007/06/11/04-is-a-go/feed/