Skip to content

Commit

Permalink
Release v1.0.0
Browse files Browse the repository at this point in the history
Signed-off-by: Hiroshi Miura <[email protected]>
  • Loading branch information
miurahr committed Feb 10, 2023
1 parent 7efdaa0 commit 2a82cd2
Show file tree
Hide file tree
Showing 3 changed files with 25 additions and 23 deletions.
9 changes: 6 additions & 3 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,11 @@ All notable changes to this project will be documented in this file.

## [Unreleased]

* Spin out Moses MT connector
## v1.0.0

* First release of Moses MT connector
* Spin out Moses MT connector from OmegaT
* Check OmegaT version whether to built-in moses connector
* Port resource bundles
* L10N: Port resource bundles

[Unreleased]: https://github.com/omegat-org/moses-plugin/compare/v0.1.0...HEAD
[Unreleased]: https://github.com/omegat-org/moses-plugin/compare/v1.0.0...HEAD
36 changes: 17 additions & 19 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,20 +1,28 @@
# OmegaT Moses MT connector plugin

This is spin-out Moses MT connector for OmegaT.
Moses MT connector uses Apache XML-RPC client library that is known to have CRITICAL vulnerability and
it is not fixed.

This is spin-out Moses MT connector for OmegaT 5.8.0 or later.
Moses MT connector uses Apache XML-RPC client library that is known to have CRITICAL vulnerability.
It is why Moses MT connector is removed from OmegaT main distribution.

The plugin here is a spin-out project that is as same as the connector in OmegaT 5.7.1.
The plugin here uses the forked and patched version of xml-rpc client and experimental release.

## CAUTION
## Version and development status

Current published version is version 1.0.0.

## Installation

You can get a plugin jar file from zip distribution file.
OmegaT plugin should be placed in `$HOME/.omegat/plugin` or `C:\Program Files\OmegaT\plugin`
depending on your operating system.

OmegaT Moses MT connector has VULNERABILITY ranked as CRITICAL.
## License

### What you should aware of?
This project is distributed under the GNU general public license version 3 or later.

If moses MT service is compromised, OmegaT connector might execute arbitrary code from attacker on your PC.
## CAUTION

Moses MT connector in OmegaT 5.7.1 and before has VULNERABILITY ranked as CRITICAL.

### Deserialization of Untrusted Data

Expand All @@ -25,13 +33,3 @@ A flaw was discovered where the XMLRPC client implementation performed deseriali
the server-side exception serialized in the faultCause attribute of XMLRPC error response messages.
A malicious or compromised XMLRPC server could possibly use this flaw to execute arbitrary code with the privileges
of an application using the Apache XMLRPC client library.

## Installation

You can get a plugin jar file from zip distribution file.
OmegaT plugin should be placed in `$HOME/.omegat/plugin` or `C:\Program Files\OmegaT\plugin`
depending on your operating system.

## License

This project is distributed under the GNU general public license version 3 or later.
3 changes: 2 additions & 1 deletion build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -9,9 +9,10 @@ plugins {
id('org.omegat.gradle') version '1.5.9'
}

version = '5.8.0'
version = '1.0.0'

omegat {
// minimum required version is 5.8.0
version = "5.7.1"
pluginClass = "org.omegat.connectors.machinetranslators.moses.MosesTranslate"
}
Expand Down

0 comments on commit 2a82cd2

Please sign in to comment.