Compare commits

..
2 Commits
Author SHA1 Message Date
tech 19cb788556 Update signed manifest to 7.23.16 2026-08-10 11:08:03 +00:00
tech e52046437b Update signed manifest to 7.23.15 2026-08-10 10:55:14 +00:00
+7 -7
View File
@@ -1,11 +1,11 @@
{
"version": "7.23.14",
"released_at": "2026-08-10T10:42:30+00:00",
"package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.14/argus-wordpress-defence-7.23.14.zip",
"sha256": "6b2365b173bd8e583a5d04021d205c773f927217b4870fc3ebff8c298c53367b",
"version": "7.23.16",
"released_at": "2026-08-10T11:08:03+00:00",
"package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.16/argus-wordpress-defence-7.23.16.zip",
"sha256": "08e3f53858885dc34bea9ca62396b3a343e146ae9310994f0eb84ec2b70107b5",
"min_php": "7.4",
"min_wp": "6.0",
"critical": true,
"summary": "* Fixed a serious bug: the Firewall could block ordinary visitors just for arriving from an\n everyday link -- for example, a link shared on Facebook, whose own redirect URL happened to\n match a pattern the Firewall treated as suspicious. The underlying cause was broader than that\n one case: 132 of the Firewall's 137 protection rules were checking a visitor's Referer,\n User-Agent, and X-Forwarded-For information -- values a visitor doesn't control -- when they\n should only ever have been checking what a visitor actually submits (search terms, form fields,\n comments, and similar). Those three values are now excluded everywhere except the handful of\n rules that specifically need them (Log4Shell-style attacks are delivered through exactly those\n values, so detection there is unchanged). No settings change needed; this takes effect\n automatically.",
"signature": "l3gHdqDlNbkuk88XuJpVOMiAbAMNVoht7lVJ0UgkgvcLgDUTmcnaYS9g6XoHqH6sPTkmLA6TL2SYe3d2d1NOCA=="
"critical": false,
"summary": "* Vulnerability checking now also runs immediately whenever a plugin or theme is installed or\n updated (when connected to ARGUS Cloud), instead of only on the regular hourly schedule -- so you\n find out right away if something you just installed has a known issue. The regular hourly check\n continues to run as before for everything else.",
"signature": "cGe/Vc4NAWalUjkDueEw73IDsSWmEtdBsW7ppx8h+V8tStLgfxJ/KH1Kp2lIqqYF5A9EKDV8uUOXXYv4wIHDBQ=="
}