[gopher] Bucktooth 0.2.9

Cameron Kaiser spectre at floodgap.com
Sun May 1 23:53:53 UTC 2011


Bucktooth 0.2.9 is released with three changes:

- Repairs a potential security issue where gopherglobs could enumerate files
  outside of the mountpoint. The files can't be served, but the names can be
  displayed. This requires a malicious gophermap to accomplish.

- A pseudo-caps.txt file is generated if there is no /caps.txt (with basic
  options appropriate to a POSIX file system). If a /caps.txt file does exist,
  it overrides the built-in one.

- Fixes an issue with the mole SELECTOR environment variable if the client
  uses a tab character to separate request and arguments.

	gopher://gopher.floodgap.com/1/buck

-- 
------------------------------------ personal: http://www.cameronkaiser.com/ --
  Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckaiser at floodgap.com
-- #include <std_disclaimer.h> ------------------------------------------------



More information about the Gopher-Project mailing list