[Chicken-users] Security issue in henrietta script

[Christian Kellermann]

Dear chicken fans!

I have to inform you that the henrietta script supporting our egg
distribution on call-cc.org and its mirror kitten-technologies.co.uk
included an error that lead to arbitrary filesystem reads on the
server. 

Affected systems:

All henrietta installations prior to version 0.6.

Solution:

A new version 0.6 of the henrietta egg has been released that fixes
the issue. All users running the henrietta egg are advised to upgrade
immediately.

Are other users of chicken affected?

The "client" side of chicken's code is not affected by this issue.
If you have not installed the henrietta egg, you do not need to do
anything.

My thanks go to the folks on #chicken and the chicken team for
promptly handling the issue once identified.

Kind regards,

Christian

-- 
Who can (make) the muddy water (clear)? Let it be still, and it will
gradually become clear. Who can secure the condition of rest? Let
movement go on, and the condition of rest will gradually arise.
 -- Lao Tse.