Skip to content

v2026.708.3-solarflare

Choose a tag to compare

View all tags
@vindeckyy vindeckyy released this 13 Jul 04:46
v2026.708.3-solarflare
1ce3cec

Security sweep:

  • src/stream.cpp: bound length-prefixed parse in IDX_INPUT_DATA and IDX_LOSS_STATS handlers (M-1)
  • src/crypto.cpp: PEM_read_bio_X509 / PEM_read_bio_PrivateKey return values now checked (M-2)
  • src/nvhttp.cpp: cap concurrent TLS handshakes at 64 (M-3)
  • src/httpcommon.cpp + src/confighttp.cpp: password min length 12 + per-IP login rate limit 10/30s (M-4)
  • src/confighttp.cpp: cover-upload path traversal guard, API token log-injection guard (L-1, L-2)
  • src/httpcommon.cpp: download_file TLS verify + HTTPS-only + timeout (L-3)
  • cmake/packaging/linux.cmake: install(CODE) hook applies setcap on local builds
Assets 3
Loading