Lurker

A point release rolling up some three years of bugfixes.

This update closes three remotely exploitable
security vulnerabilities. All lurker versions from
0.1a to 2.0 are affected. The specific weaknesses
which have been closed include: reading any file
accessible to the user executing lurker.cgi,
(over)writing chosen files in any writable
directory called mbox, and stealing users' browser
cookies via cross-site scripting.

This release introduces oft-requested support of private mailing lists (via multiple frontends). Additionally, one can now delete pesky spam and reply to an email directly from the Web. Much of the documentation has been improved (notably the installation documentation), and there have been many minor bugfixes/improvements under the hood.

This release adds no new functionality. However, if messages disappeared from your site after daylight savings, then this will fix the issue for you. Several other cosmetic issues have been addressed as well.

This release provides a Web-selectable locale to control the output language; searches may also be restricted by language. Not searching in the style of Google, the ability to delete messages, and many new config and file command line options round out this release.