tag name | 2.0.5 (f148232d906b383d25fccb33600bf1fb1d4ee402) |
tag date | 2024-06-11 08:21:20 +0000 |
tagged by | Omar Polo <op@omarpolo.com> |
tagged object | commit cb384f4280... |
gmid 2.0.5 -- "Lady Stardust" security release
Released June 11, 2024
signify(1) pubkeys for this release:
RWQ+Bm0F0FtPLtTnpRe09x/Z6Fiodk4toTZe2TJ4yCqDZ6l0c5wiU9te
This release fixes a logic error that cane result in a DoS; therefore is
a strongly reccommended update for all users. It is safe to update from
any version of the 2.0.x series since there were no breaking changes.
Changelog:
* allow again empty lines at the start of the configuration.
* change how strnvis(3) is handled: on systems with the
broken interface gmid will just use its own built-in
version.
* reject requests with NUL bytes in them.
* don't error on a '..' component at the start of the path.
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgnScPkjwE1UmSdPzuCeksglYrR9
dNrIOS1A6VLfwIaPgAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQAHMEmsYKagmNhwFdd1qeFYv15YscNVuw3XfYDf6AMFPl/hwAPfwX/o7Syyqr4XEoF
bykN+NdsdW98hpgtdm0gQ=
-----END SSH SIGNATURE-----