From 2a82cd2fc928fe93369c8d9dada841dfab571627 Mon Sep 17 00:00:00 2001 From: Hiroshi Miura Date: Fri, 10 Feb 2023 17:43:32 +0900 Subject: [PATCH] Release v1.0.0 Signed-off-by: Hiroshi Miura --- CHANGELOG.md | 9 ++++++--- README.md | 36 +++++++++++++++++------------------- build.gradle | 3 ++- 3 files changed, 25 insertions(+), 23 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 43ba5bf..7e4dbc8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,8 +3,11 @@ All notable changes to this project will be documented in this file. ## [Unreleased] -* Spin out Moses MT connector +## v1.0.0 + +* First release of Moses MT connector +* Spin out Moses MT connector from OmegaT * Check OmegaT version whether to built-in moses connector -* Port resource bundles +* L10N: Port resource bundles -[Unreleased]: https://github.com/omegat-org/moses-plugin/compare/v0.1.0...HEAD +[Unreleased]: https://github.com/omegat-org/moses-plugin/compare/v1.0.0...HEAD diff --git a/README.md b/README.md index 27035f7..2f12959 100644 --- a/README.md +++ b/README.md @@ -1,20 +1,28 @@ # OmegaT Moses MT connector plugin -This is spin-out Moses MT connector for OmegaT. -Moses MT connector uses Apache XML-RPC client library that is known to have CRITICAL vulnerability and -it is not fixed. - +This is spin-out Moses MT connector for OmegaT 5.8.0 or later. +Moses MT connector uses Apache XML-RPC client library that is known to have CRITICAL vulnerability. It is why Moses MT connector is removed from OmegaT main distribution. -The plugin here is a spin-out project that is as same as the connector in OmegaT 5.7.1. +The plugin here uses the forked and patched version of xml-rpc client and experimental release. -## CAUTION +## Version and development status + +Current published version is version 1.0.0. + +## Installation + +You can get a plugin jar file from zip distribution file. +OmegaT plugin should be placed in `$HOME/.omegat/plugin` or `C:\Program Files\OmegaT\plugin` +depending on your operating system. -OmegaT Moses MT connector has VULNERABILITY ranked as CRITICAL. +## License -### What you should aware of? +This project is distributed under the GNU general public license version 3 or later. -If moses MT service is compromised, OmegaT connector might execute arbitrary code from attacker on your PC. +## CAUTION + +Moses MT connector in OmegaT 5.7.1 and before has VULNERABILITY ranked as CRITICAL. ### Deserialization of Untrusted Data @@ -25,13 +33,3 @@ A flaw was discovered where the XMLRPC client implementation performed deseriali the server-side exception serialized in the faultCause attribute of XMLRPC error response messages. A malicious or compromised XMLRPC server could possibly use this flaw to execute arbitrary code with the privileges of an application using the Apache XMLRPC client library. - -## Installation - -You can get a plugin jar file from zip distribution file. -OmegaT plugin should be placed in `$HOME/.omegat/plugin` or `C:\Program Files\OmegaT\plugin` -depending on your operating system. - -## License - -This project is distributed under the GNU general public license version 3 or later. diff --git a/build.gradle b/build.gradle index 51ad698..e6e82fb 100644 --- a/build.gradle +++ b/build.gradle @@ -9,9 +9,10 @@ plugins { id('org.omegat.gradle') version '1.5.9' } -version = '5.8.0' +version = '1.0.0' omegat { + // minimum required version is 5.8.0 version = "5.7.1" pluginClass = "org.omegat.connectors.machinetranslators.moses.MosesTranslate" }