From 83048a5e4ef5ddff1b5dce4509356f87ba76dd67 Mon Sep 17 00:00:00 2001 From: Richard Bayerle Date: Thu, 6 Apr 2017 14:47:09 +0200 Subject: [PATCH] Bump version to 0.6.5 --- README.md | 10 +++++++--- src/lurch.c | 2 +- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 1a1a464..fe2a9f1 100644 --- a/README.md +++ b/README.md @@ -1,11 +1,15 @@ -# lurch 0.6.4 +# lurch 0.6.5 /lʊʁç/. In German, an Axolotl is a type of Lurch, which simply means 'amphibian'. This plugin brings Axolotl, by now renamed to double ratchet, to libpurple applications such as [Pidgin](https://www.pidgin.im/) by implementing [OMEMO](https://conversations.im/omemo/). (Plus I thought the word sounds funny, especially when pronounced by a speaker of English.) ## News -Currently you should not use Pidgin's XHTML-IM feature (i.e. changing anything like font size or style), as it sends an additional copy of the whole plaintext in another node. -Fix soon. +0.6.5 is out and you should get it as it contains important security updates. + +If you use any text-formatting, through XHTML-IM a whole plaintext copy of your text was sent along with the ciphertext, which is obviously bad. +The `` tags and any additional `` tags are now stripped from the message. + +Also, the tag is now appended to the key, i.e. is part of the data which is encrypted with the double ratchet session. ## Installation ### Linux (Arch package) diff --git a/src/lurch.c b/src/lurch.c index 2c5819b..7014c5f 100644 --- a/src/lurch.c +++ b/src/lurch.c @@ -2713,7 +2713,7 @@ static PurplePluginInfo info = { "core-riba-lurch", "lurch", - "0.6.4", + "0.6.5", "Implements OMEMO for libpurple.", "End-to-end encryption using the Signal protocol, adapted for XMPP.",