Fix command injection vulnerability

Veil-Framework · Mar 31, 2016 · 7f643bd · 7f643bd
1 parent af2c9ea
commit 7f643bd
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/CHANGELOG b/CHANGELOG
@@ -1,3 +1,7 @@
+[03.31.2016]
+     Released.: 2.26
+     Fixed....: Fixed command injection vulnerability because @botnet_hunter supplied us with a fix that worked against all of his tests.  Thanks to @botnet_hunter for helping to remediate this issue!
+
 [03.29.2016]
      Released.: 2.25
      Fixed....: Security vulnerability reported to us by @botnet_hunter.  There was an issue with the RPC server when binding to 0.0.0.0 that essentially allowed RCE.  If you weren't using the RPC server, you weren't affected, but it's good to patch.

diff --git a/modules/common/messages.py b/modules/common/messages.py
@@ -8,7 +8,7 @@
 import helpers
 
 
-version = "2.25"
+version = "2.26"
 
 
 # try to find and import the settings.py config file