xavi
/
slcl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 3 Wiki Activity

3 Releases 11 Tags

  • v0.2.1 dd29f9096a

    slcl v0.2.1 Stable

    xavi released this 2024-02-20 21:44:53 +01:00 | 3 commits to master since this release

    This release brings several security fixes and improvements over v0.2.0, so please update your instances when possible.

    Changelog

    • Fix invalid path (e.g.: .., .) detection under some circumstances.
    • Reject requests to /public/ i.e., without any file name.
    • Replace some calls to stat(2) with fstat(2), and fopen(3) with fdopen(3) so as to reuse file descriptors.
    • Bump libweb to 0.3.0.
    • usergen: do not abort on existing user directory.

    Packaging

    Thanks to the spm-packages project, static builds of slcl are also available for Linux x86, x86_64, aarch64 and armv7l.

    Known issues

    • LDFLAGS are unexpectedly being transferred to children Makefiles.

    Thanks to

    • jmjl from tilde.green, who discovered most of the issues described above.
    • Anyone using this piece of software!
    Downloads