diff --git a/CHANGELOG b/CHANGELOG index 81a492b..fe0ac11 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,3 +1,7 @@ +[03.31.2016] + Released.: 2.26 + Fixed....: Fixed command injection vulnerability because @botnet_hunter supplied us with a fix that worked against all of his tests. Thanks to @botnet_hunter for helping to remediate this issue! + [03.29.2016] Released.: 2.25 Fixed....: Security vulnerability reported to us by @botnet_hunter. There was an issue with the RPC server when binding to 0.0.0.0 that essentially allowed RCE. If you weren't using the RPC server, you weren't affected, but it's good to patch. diff --git a/modules/common/messages.py b/modules/common/messages.py index a9c8795..70f49b2 100644 --- a/modules/common/messages.py +++ b/modules/common/messages.py @@ -8,7 +8,7 @@ import helpers -version = "2.25" +version = "2.26" # try to find and import the settings.py config file