Commits
- Commit:
4107583e32017d94beda9de6f531ca82bb1e7ffe
- From:
- Omar Polo <op@omarpolo.com>
- Date:
gmid 1.8.5
- Commit:
2d7a479e73839eafe90cf619f6e70d1a6206c8cc
- From:
- Omar Polo <op@omarpolo.com>
- Date:
add memmem compat
- Commit:
f759119d2f5707baac35b4960a6ddca5bd205647
- From:
- Omar Polo <op@omarpolo.com>
- Date:
bump version
- Commit:
1f6de7491cee22546d397793945ec16dc981836c
- From:
- Omar Polo <op@omarpolo.com>
- Date:
changes for 1.8.4
- Commit:
96e3c013146396d02318685d79ed7025a09ffb43
- From:
- Omar Polo <op@omarpolo.com>
- Date:
refactor the makefile / configure
steal more (good) stuff from mandoc-portable :)
- Commit:
a555e0d67baef271ffe4a186326ee5f1c16fff75
- From:
- Omar Polo <op@omarpolo.com>
- Date:
copyright years
- Commit:
cb2b85512c2d10bf2f89b4d93f6157babc7e283f
- From:
- Omar Polo <op@omarpolo.com>
- Date:
add proper copyrights
was a mistake on my part and a leftover from the first iterations.
Initially I only stole a few bits, that's why the comment but not the
copyright, but then i threwed out and restarted using oconfigure.
Then the configure script has its own independent changes, but need to
give attribution nevertheless.
- Commit:
72e7fbbcb7740a86e44d043727782b50356dd69d
- From:
- Omar Polo <op@omarpolo.com>
- Date:
master is now 1.8.3-current
- Commit:
1a04137e1869781efcd635a1abd4387ccfa6e56d
- From:
- Omar Polo <op@omarpolo.com>
- Date:
tag 1.8.3 -- "Lightbulb Sun" bugfix release
gmid 1.8.3 "Lightbulb Sun" bugfix release
=========================================
Released March 27, 2022.
signify(1) pubkeys for this release:
RWTy3UJQzpxBUAymBwb2EGLLm0b3H/1n8hzhaC9HYFYzNuTavGt9QSwC
Bug Fixes
~~~~~~~~~
* fix a possible out-of-bound access in the CGI handling. It was
introduced last October during a refactoring, but due to how
many malloc(3) implementations works this hasn't been found
until now. Otto' malloc is more strict fortunately.
- Commit:
62a46b03c6f911f3674d6cb7b77a49bac8efad42
- From:
- Omar Polo <op@omarpolo.com>
- Date:
tag 1.8.2 -- "Lightbulb Sun" bugfix release
gmid 1.8.2 "Lightbulb Sun" bugfix release
=========================================
Released March 26, 2022.
signify(1) pubkeys for this release:
RWTy3UJQzpxBUAymBwb2EGLLm0b3H/1n8hzhaC9HYFYzNuTavGt9QSwC
Bug Fixes
~~~~~~~~~
* fix a CGI timing issue: if a connection handled by a CGI scripts
is interrupted with the right timing it causes the server
process to exit with "fatal in client_by_id: invalid id X".
New Features
~~~~~~~~~~~~
* add a new block `type { ... }' to define mime types mapping.
Improvements
~~~~~~~~~~~~
* use shell built-in `command' instead of which(1), prodded by
cage and Allen Sobot.
* configure script: allow to set MANDIR from cmdline (Allen Sobot)
* add systemd-sysusers sample file in contrib/ (Nakaya)
* [linux/seccomp] allow fstatat64(2), llseek(2) and sigreturn(2),
needed by glibc on armv7. (Tobias Berger)
* [linux/seccomp] tightens rules by allowing openat(2) only with
the O_RDONLY flag.
- Commit:
9db5e7051ebb37a9078e79ca46daf7f8f8f3f963
- From:
- Omar Polo <op@omarpolo.com>
- Date:
get rid of `which` in the configure too
should have been done already in 12fcba2; reminded by Allen Sobot,
thanks!
- Commit:
5f966fbe41a18d9ad1577d659da5990994c851bc
- From:
- Omar Polo <op@omarpolo.com>
- Date:
configure: allow to set MANDIR from args
diff by Allen Sobot (chilledfrogs at disroot dot org), thanks!
- Commit:
f2dbf375a0d3313a64ac69e882291f237f1ba056
- From:
- Omar Polo <op@omarpolo.com>
- Date:
tag 1.8.1 -- "Lightbulb Sun" bugfix release
gmid 1.8.1 "Lightbulb Sun" bugfix release
=========================================
Released Feb 10, 2022.
signify(1) pubkeys for this release:
RWTy3UJQzpxBUAymBwb2EGLLm0b3H/1n8hzhaC9HYFYzNuTavGt9QSwC
Bug fixes
---------
* fix landlock usage on linux: don't assume that access
capabilities not listed are implicitly denied, because they are
not. Mickaël Salaün, the landlock author, found the same error
on game of trees:
> In a nutshell, the ruleset's handled_access_fs is required for
> backward and forward compatibility (i.e. the kernel and user space may
> not know each other's supported restrictions), hence the need to be
> explicit about the denied-by-default access rights.
In practice this affects only linux and only partially: thanks
to the design of the daemon and the seccomp filter the effects
of this mistake in handling landlock are fortunately limited.
However, in theory at least, gmid could be for e.g. tricked into
truncating existing files, so it's highly suggested to update.
Improvements
------------
All by Anna “CyberTailor”, thanks!
* don't skip unit tests when SKIP_RUNTIME_TEST is set
* add `gg' to the regress target dependencies
* fix the "implicit declaration of asprintf" warning
* sync vim syntax
- Commit:
f525aa55b85d7186f701d74b8a62ca7151ab2e9a
- From:
- Omar Polo <op@omarpolo.com>
- Date:
start new release cycle
- Commit:
a14b9f779f14edee7c22e12f1ad8a4ba2d3134df
- From:
- Omar Polo <op@omarpolo.com>
- Date:
prepare 1.8 release