* Originally in enet.sysop
* Crossposted in fidonews
* Crossposted in fido_sysop
Hello All,
qico 0.60.1 is out.
A security release.
It hardens BinkP session and password handling:
- handshake and file commands are now accepted only in the right phase,
sessions offering conflicting passwords in one M_ADR are refused.
- plaintext password compares are case-sensitive.
- failed passwords are no longer logged.
- short reads and writes are treated as errors.
- busy password-protected aka no longer opens an unprotected session.
Alongside those, the release fixes outbound busy-file handling, UTC
timestamps on BinkP transfers, the "if date" condition, longrescan,
showpkt logging and inbound modem log names.
New in this version are the kill-old-bsy keyword and systemd socket
activation for inbound ifcico.
Binaries for Debian 12 and NetBSD 11 are attached.
See 'Changes' for the full notes.
Code and changelog:
https://github.com/glasslike/qico
Mvh,
Alex.
---
* Origin: Rabarber > Skelleftea > Sweden (2:203/910)