[gopher] Bucktooth 0.2.9
Cameron Kaiser
spectre at floodgap.com
Sun May 1 23:53:53 UTC 2011
Bucktooth 0.2.9 is released with three changes:
- Repairs a potential security issue where gopherglobs could enumerate files
outside of the mountpoint. The files can't be served, but the names can be
displayed. This requires a malicious gophermap to accomplish.
- A pseudo-caps.txt file is generated if there is no /caps.txt (with basic
options appropriate to a POSIX file system). If a /caps.txt file does exist,
it overrides the built-in one.
- Fixes an issue with the mole SELECTOR environment variable if the client
uses a tab character to separate request and arguments.
gopher://gopher.floodgap.com/1/buck
--
------------------------------------ personal: http://www.cameronkaiser.com/ --
Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckaiser at floodgap.com
-- #include <std_disclaimer.h> ------------------------------------------------
More information about the Gopher-Project
mailing list