[Burp-users] burp-2.5.0 is now available

[Graham K. <gr...@gr...>]

Hello,

2.5.0 is now the 'latest' version.
2.4.0 remains the 'stable' version.

Here are the links:
https://github.com/grke/burp/releases/tag/2.5.0
https://github.com/grke/burp/releases/tag/2.4.0

Changes in burp-2.5.0:
  * 826: Restrict permissions to Windows conf files.
  * 878: Fix missing newline when logged line is exactly 128 chars long.
  * Add SSL_get_error() detail in SSL accept and connect errors.

>From the UPGRADING file:

The Windows installer sets Administrator and SYSTEM full access permissions
only on:
C:/Program Files/Burp/bin/burp.conf
C:/Program Files/Burp/bin/ssl_cert_ca.pem
C:/Program Files/Burp/bin/ssl_cert-client.key
C:/Program Files/Burp/bin/ssl_cert-client.pem
That is, it runs:
  icacls.exe "<path>" /inheritance:r /grant:r Administrators:F SYSTEM:F
If you have these files on non-default locations, and you are concerned about
restricting permissions, you may want to run the command by hand on them.
The Windows client will automatically apply the same permissions to new ssl
cert files on certificate exchange.

The code coverage stayed the same at 57.9%

Special thanks go to the followng donors for financially supporting burp
during May:

 *      £20.00 Marcin W.
 *      £20.00 Paul V. S.
 *      £10.00 Gonzalo A.
 *       £5.00 Eckart K.
 *       £5.00 John K.