]>
Cypherpunks repositories - nncp.git/log
Sergey Matveev [Sun, 28 Sep 2025 09:01:49 +0000 (12:01 +0300)]
Merge branch 'develop'
Sergey Matveev [Sun, 28 Sep 2025 08:54:54 +0000 (11:54 +0300)]
Trivial formatting
Sergey Matveev [Sun, 28 Sep 2025 08:52:01 +0000 (11:52 +0300)]
Let FreeBSD port be maintained in ports repository itself
Sergey Matveev [Sun, 28 Sep 2025 08:51:20 +0000 (11:51 +0300)]
Up to date news
Sergey Matveev [Sun, 28 Sep 2025 08:40:42 +0000 (11:40 +0300)]
Ability to read configuration from file descriptor
Sergey Matveev [Sun, 28 Sep 2025 08:40:53 +0000 (11:40 +0300)]
Go formatting
Sergey Matveev [Thu, 25 Sep 2025 15:13:50 +0000 (18:13 +0300)]
Sending to area does not require private key existence
Sergey Matveev [Sun, 21 Sep 2025 13:10:36 +0000 (16:10 +0300)]
Fix maillist address
Sergey Matveev [Sat, 20 Sep 2025 12:20:29 +0000 (15:20 +0300)]
Download link for 8.12.1 release
Sergey Matveev [Sat, 20 Sep 2025 12:18:38 +0000 (15:18 +0300)]
Merge branch 'develop'
Sergey Matveev [Sat, 20 Sep 2025 12:11:01 +0000 (15:11 +0300)]
Prepare for release
Sergey Matveev [Sat, 20 Sep 2025 12:06:42 +0000 (15:06 +0300)]
Update zstd compression library
Sergey Matveev [Sat, 20 Sep 2025 12:04:17 +0000 (15:04 +0300)]
Set hjson-cli's version
Thanks to Klaus Alexander Seistrup for warn about lack of it.
Sergey Matveev [Sat, 20 Sep 2025 11:57:45 +0000 (14:57 +0300)]
Update hjson-cli dependency
Sergey Matveev [Fri, 19 Sep 2025 14:12:20 +0000 (17:12 +0300)]
Typo
Sergey Matveev [Fri, 19 Sep 2025 14:04:13 +0000 (17:04 +0300)]
Download link for 8.12.0 release
Sergey Matveev [Fri, 19 Sep 2025 13:50:50 +0000 (16:50 +0300)]
Merge branch 'develop'
Sergey Matveev [Fri, 19 Sep 2025 13:26:41 +0000 (16:26 +0300)]
News about path traversal prevention
Eugene Medvedev [Fri, 19 Sep 2025 13:12:18 +0000 (16:12 +0300)]
Prevent path traversal during freq/file
As it currently stands, NNCP is vulnerable to path traversal attacks with
freq and file functions: Despite the requirement for both to supply full path
in configuration, both types of packets will accept and act upon paths containing
"..". Most obviously, this allows one to request any file NNCP has access to,
like its own configuration file with the private keys in it.
Likewise, a sent file can break out of the incoming directory in the same manner
and be written anywhere on the system that the user can write to.
This patch is my take on dealing with this by by limiting path traversal to
below the configured full path. It does nothing about, e.g., symlinks,
and I'm not sure anything should be done about those.
Sergey Matveev [Fri, 19 Sep 2025 12:44:12 +0000 (15:44 +0300)]
Combine all excutables
Sergey Matveev [Fri, 19 Sep 2025 12:54:07 +0000 (15:54 +0300)]
recfile does not need 1.24
Sergey Matveev [Sun, 13 Jul 2025 07:28:21 +0000 (10:28 +0300)]
Use an updated recfile library
Sergey Matveev [Mon, 7 Jul 2025 14:23:14 +0000 (17:23 +0300)]
Typo
Sergey Matveev [Thu, 15 May 2025 09:49:43 +0000 (12:49 +0300)]
Proper link to Zstandard
Sergey Matveev [Thu, 15 May 2025 09:49:28 +0000 (12:49 +0300)]
More VCS links
Sergey Matveev [Thu, 15 May 2025 09:49:09 +0000 (12:49 +0300)]
Proper preposition usage
Sergey Matveev [Thu, 26 Dec 2024 09:22:36 +0000 (12:22 +0300)]
Raise copyright years
Sergey Matveev [Mon, 29 Jul 2024 07:59:37 +0000 (10:59 +0300)]
ca.cypherpunks.ru -> .su
Sergey Matveev [Tue, 23 Jul 2024 10:29:13 +0000 (13:29 +0300)]
Download link for 8.11.0 release
Sergey Matveev [Tue, 23 Jul 2024 10:24:12 +0000 (13:24 +0300)]
Merge branch 'develop'
Sergey Matveev [Tue, 23 Jul 2024 09:07:40 +0000 (12:07 +0300)]
Prepare for the next release
Sergey Matveev [Tue, 23 Jul 2024 09:25:55 +0000 (12:25 +0300)]
Alter Go namespace
cypherpunks.ru will expire soon.
Sergey Matveev [Tue, 23 Jul 2024 09:22:39 +0000 (12:22 +0300)]
Fix case
Sergey Matveev [Tue, 23 Jul 2024 09:14:18 +0000 (12:14 +0300)]
Unify redirection operator usage
Sergey Matveev [Tue, 23 Jul 2024 08:37:35 +0000 (11:37 +0300)]
Update gvisor
Sergey Matveev [Tue, 23 Jul 2024 07:48:06 +0000 (10:48 +0300)]
Update Yggdrasil dependency
Sergey Matveev [Tue, 23 Jul 2024 07:45:43 +0000 (10:45 +0300)]
Update various dependencies
Sergey Matveev [Mon, 22 Jul 2024 13:02:15 +0000 (16:02 +0300)]
lists.cypherpunks.ru->.su
Sergey Matveev [Sun, 21 Apr 2024 15:55:00 +0000 (18:55 +0300)]
Note about buildability with 1.22
Sergey Matveev [Sun, 21 Apr 2024 15:41:05 +0000 (18:41 +0300)]
Update some dependencies
Sergey Matveev [Sun, 21 Apr 2024 15:38:51 +0000 (18:38 +0300)]
Fix noyggdrasil build
Sergey Matveev [Wed, 28 Feb 2024 07:27:49 +0000 (10:27 +0300)]
Fixed link
Sergey Matveev [Fri, 8 Dec 2023 07:58:38 +0000 (10:58 +0300)]
Unify copyright comment format
Sergey Matveev [Tue, 31 Oct 2023 19:57:22 +0000 (22:57 +0300)]
Download link for 8.10.0 release
Sergey Matveev [Tue, 31 Oct 2023 19:55:40 +0000 (22:55 +0300)]
Merge branch 'develop'
Sergey Matveev [Tue, 31 Oct 2023 19:10:18 +0000 (22:10 +0300)]
Update dependencies
Sergey Matveev [Sun, 13 Aug 2023 20:20:17 +0000 (23:20 +0300)]
Mention .sig in announcements
Sergey Matveev [Sun, 13 Aug 2023 20:16:47 +0000 (23:16 +0300)]
Download link for 8.9.0 release
Sergey Matveev [Sun, 13 Aug 2023 20:15:35 +0000 (23:15 +0300)]
Merge branch 'develop'
Sergey Matveev [Sun, 13 Aug 2023 20:13:48 +0000 (23:13 +0300)]
t/ is unnecessary in tarball
Sergey Matveev [Sun, 13 Aug 2023 20:13:12 +0000 (23:13 +0300)]
Mention .sig in download
Sergey Matveev [Sun, 13 Aug 2023 18:31:21 +0000 (21:31 +0300)]
Generate ACKs during tossing
Sergey Matveev [Sun, 13 Aug 2023 16:50:09 +0000 (19:50 +0300)]
Unify filepath usage
Sergey Matveev [Sun, 13 Aug 2023 16:49:16 +0000 (19:49 +0300)]
Do not use multiline const-s with single entry
Sergey Matveev [Sun, 13 Aug 2023 16:48:41 +0000 (19:48 +0300)]
Update dependencies
Sergey Matveev [Sun, 13 Aug 2023 16:48:26 +0000 (19:48 +0300)]
Wrap long lines
Sergey Matveev [Sun, 13 Aug 2023 16:48:08 +0000 (19:48 +0300)]
Fix condition
Sergey Matveev [Sun, 13 Aug 2023 16:45:03 +0000 (19:45 +0300)]
Fix hjson-cli building
Sergey Matveev [Thu, 10 Aug 2023 12:51:15 +0000 (15:51 +0300)]
Remove huge usage headers, -warranty exists anyway
Sergey Matveev [Thu, 10 Aug 2023 12:49:25 +0000 (15:49 +0300)]
Move arguments to TossOpts
Sergey Matveev [Thu, 3 Aug 2023 13:04:24 +0000 (16:04 +0300)]
No redo during installation
Sergey Matveev [Wed, 9 Aug 2023 12:08:24 +0000 (15:08 +0300)]
TLS is enabled on my VPS
Sergey Matveev [Wed, 9 Aug 2023 12:07:58 +0000 (15:07 +0300)]
Non-redirected URLs
Sergey Matveev [Wed, 9 Aug 2023 12:07:47 +0000 (15:07 +0300)]
Excess word
Sergey Matveev [Tue, 8 Aug 2023 19:43:57 +0000 (22:43 +0300)]
OpenSSH signature support
Sergey Matveev [Tue, 8 Aug 2023 08:45:02 +0000 (11:45 +0300)]
Unused style
Sergey Matveev [Thu, 3 Aug 2023 13:04:57 +0000 (16:04 +0300)]
Armored signature
Sergey Matveev [Thu, 3 Aug 2023 13:05:37 +0000 (16:05 +0300)]
No CSS
Sergey Matveev [Sun, 4 Jun 2023 08:38:43 +0000 (11:38 +0300)]
Use more efficient ReadDir instead of Readdir
Sergey Matveev [Sun, 4 Jun 2023 08:37:33 +0000 (11:37 +0300)]
Fix typo check
Sergey Matveev [Sun, 4 Jun 2023 08:37:15 +0000 (11:37 +0300)]
Excess link to contacts
Sergey Matveev [Mon, 1 May 2023 20:04:19 +0000 (23:04 +0300)]
Typo
Sergey Matveev [Sun, 30 Apr 2023 21:14:58 +0000 (00:14 +0300)]
Typo
Sergey Matveev [Sat, 29 Apr 2023 11:03:14 +0000 (14:03 +0300)]
Download link for 8.8.3 release
Sergey Matveev [Sat, 29 Apr 2023 11:01:08 +0000 (14:01 +0300)]
Merge branch 'develop'
Sergey Matveev [Sat, 29 Apr 2023 09:49:53 +0000 (12:49 +0300)]
Fixed nncp-reass's badSize calculation
Sergey Matveev [Sat, 29 Apr 2023 09:25:41 +0000 (12:25 +0300)]
Update dependencies
Sergey Matveev [Sat, 29 Apr 2023 09:21:30 +0000 (12:21 +0300)]
os.IsNotExists is deprecated
Sergey Matveev [Sat, 29 Apr 2023 09:03:41 +0000 (12:03 +0300)]
ioutil is deprecated since 1.16/1.17
Sergey Matveev [Fri, 14 Apr 2023 09:18:01 +0000 (12:18 +0300)]
Redundant @documentencoding
Sergey Matveev [Thu, 13 Apr 2023 16:02:12 +0000 (19:02 +0300)]
Hashes are redundantly present in .meta4
Sergey Matveev [Thu, 23 Mar 2023 10:12:41 +0000 (13:12 +0300)]
Update dependencies
Sergey Matveev [Thu, 23 Mar 2023 10:04:46 +0000 (13:04 +0300)]
Unnecessary argument
Sergey Matveev [Thu, 23 Mar 2023 10:04:33 +0000 (13:04 +0300)]
Convenient time.Since()
Sergey Matveev [Thu, 23 Mar 2023 10:04:10 +0000 (13:04 +0300)]
Simplified conditions
Sergey Matveev [Thu, 23 Mar 2023 10:03:20 +0000 (13:03 +0300)]
Missed error checks
Sergey Matveev [Thu, 23 Mar 2023 10:02:38 +0000 (13:02 +0300)]
Unused structure fields
Sergey Matveev [Thu, 23 Mar 2023 10:02:06 +0000 (13:02 +0300)]
Too early defers
Sergey Matveev [Thu, 23 Mar 2023 10:01:51 +0000 (13:01 +0300)]
Unnecessary return
Sergey Matveev [Thu, 23 Mar 2023 09:59:40 +0000 (12:59 +0300)]
Use bytes.Equal() instead of bytes.Compare()==0
Sergey Matveev [Thu, 23 Mar 2023 09:27:41 +0000 (12:27 +0300)]
Unnecessary printf usage
Sergey Matveev [Tue, 7 Mar 2023 11:11:17 +0000 (14:11 +0300)]
Two more Debian-based distributions
Sergey Matveev [Tue, 7 Mar 2023 10:57:26 +0000 (13:57 +0300)]
More convenient URL for Guix package
Sergey Matveev [Tue, 7 Mar 2023 10:56:59 +0000 (13:56 +0300)]
Useless .sh extension
Sergey Matveev [Sun, 8 Jan 2023 12:23:54 +0000 (15:23 +0300)]
Update dependencies
Sergey Matveev [Tue, 27 Dec 2022 14:01:49 +0000 (17:01 +0300)]
Raise copyright years
Sergey Matveev [Sat, 10 Dec 2022 19:42:45 +0000 (22:42 +0300)]
Mention Docker image
Sergey Matveev [Mon, 5 Dec 2022 08:18:24 +0000 (11:18 +0300)]
More reliable redo target
contrib/do can use long relative paths as a "$1" argument to default target.
Sergey Matveev [Tue, 22 Nov 2022 14:02:36 +0000 (17:02 +0300)]
Ability to use newer gvisor's API
Sergey Matveev [Fri, 18 Nov 2022 18:40:09 +0000 (21:40 +0300)]
Download link for 8.8.2 release