Changeset 11128 in ntrip for trunk/BNC/CHANGELOG.md

Timestamp:

Oct 24, 2026, 11:37:52 PM (3 days ago)

Author:

stuerze

Message:

Some fixes from security point of view

File:

• trunk/BNC/CHANGELOG.md (modified) (1 diff)

trunk/BNC/CHANGELOG.md

@@ -58 +58 @@
 - FIXED: Encoding of new RTCM-SSR metadata with more than 30 additional parameter bits
 - CHANGED: Help text of 'Ignore SSL authorization errors' explains that the server is then not authenticated
+- CHANGED: UDP and RTSP/RTP streams: datagrams are accepted only from the Ntrip Broadcaster; streams without Ntrip ('UN') accept only the sender given as host in the stream URL, any sender with 127.0.0.1 (as written by 'Add Stream - Coming from UDP Port')
+- CHANGED: The configuration file (contains passwords) is saved readable for the owner only
+- FIXED: Upload: any caster answer containing '200' (e.g. in a header of a rejection) was taken as success; now the status line is checked
+- FIXED: Raw file input (--file): a station ID with a path led to output files outside the output directory; invalid chunk sizes are rejected
 
 ## 2.13.7 (2026-07-31)