Kore 4.3.0
previous | latest
| Date | Name | Hash | Signature |
|---|---|---|---|
| 2026-09-02 | kore-4.3.0.tar.gz | sha256 | download |
Security fixes
- Fix an integer underflow related to http_body_max check.
Reported by Tristan <TristanInSec@gmail.com>
New features
- Modern OpenSSL support.
- Python support up to 3.14.
- Initial support for lua runtime.
- Memory guards for all allocations (KORE_MEM_GUARD).
- Support for callbacks during HTTP request lifecycle.
Bug fixes
- python: Make sure its safe to call timer close from inside of the actual timer callback.
- acme: Increased timeout to prevent many ACME renewals from never completing due to aggressive timeouts.
- http: Prevent kore from throwing a 408 while a request is being handled.
- worker: Count number of workers correctly before issuing a warning about CPU vs worker count.
Other changes
- options: -f is now the default, use -d to daemonize.
- python: Added kore.redirect().
- python: Added req.headers().
- python: Improved error reporting.
- python: Added 'env' keyword to kore.proc().
- build: Removed unused build scripts.
- linux: synced system call lists.
- docs: removed stale manual pages.
- kodev: Allow building of clangdb files.
- config: moved deployment configuration to general.
- http: Improve error feedback on full receive buffers.
- http: Improve decoding of url encoded HTTP bodies.
- acme: Use more robust Open/LibreSSL APIs when creating the x509 acme extensions.
- crypto: remove ECDSA support.
- crypto: On CRL update, disconnect any authenticated client who's certificate has newly been revoked.
- And much more ...
