znc-1.7.1

ZNC 1.7.1

Security critical fixes
=======================

* CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
* CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.

Core
====

* Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build
* Fix language selector. Russian and German were both not selectable.
* Fix build without SSL support
* Fix several broken strings
* Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted.

New
===

* Add partial Spanish, Indonesian, and Dutch translations

Modules
=======

* adminlog: Log the error message again (regression of 1.7.0)
* admindebug: New module, which allows admins to turn on/off --debug in runtime
* flooddetach: Fix description of commands
* modperl: Fix memory leak in NV handling
* modperl: Fix functions which return VCString
* modpython: Fix functions which return VCString
* webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled

Internal
========

* Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
* Don't throw from destructor in the integration test
* Fix a warning with integration test / gmake / znc-buildmod interaction.
-----BEGIN PGP SIGNATURE-----
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=YqMK
-----END PGP SIGNATURE-----