💾 Archived View for carcosa.net › journal › 20200613-germinal-update.gmi captured on 2024-05-10 at 11:10:07. Gemini links have been rewritten to link to archived content

-=-=-=-=-=-=-

Germinal update!

I would like to announce the release of version 0.2 of my Common Lisp Gemini server, Germinal[1]. In this release:

Support for configuration by command-line or TOML config file.
Many, many bug fixes, many of which are thanks to Tobias Rautenkranz

The most important of these bug fixes is a fix to a path-traversal bug, that could have allowed carefully constructed requests to read world-readable files from outside your Germinal document root. (There was code to catch path traversals before, but it was wrong, and only caught simple cases). If you are running Germinal, you are *highly* recommended to upgrade because of this bug. Also, write to me[2]; there can't be more than a couple people running this, and until Tobias started submitting pull requests, I thought I was the only one.

[1] Germinal home page on Gemini.

[2] Email me.

The source is hosted on my own gittea instance[3], and I'm happy to accept patches either there, or by email (format with git-format-patch and/or git-send-email).

[3] Germinal gitea

If you are a smug Lisp weenie, please be gentle. I'm a Lisp newbie whomst is trying to learn things by writing this.