mathopd-1.5p1 released

Michiel Boland <[email protected]> Fri, 13 Feb 2004 16:46:19 +0100 (CET)
Newsgroups gmane.network.mathopd
Message-ID <[email protected]>
Hi. There is a brown-paper-bag bug in mathopd-1.5. So I have zapped that
release and put up mathopd-1.5p1 instead. If you run 1.5 please upgrade
ASAP. If you cannot upgrade you should at least define a global
Error404File (and an Error403File or Error401File if you use Access or
Realm.)

Thanks to Tahd Dell for pointing this out.

Problem description: normally requests for things like
/../../../../etc/passwd should be denied of course. Unfortunately the
introduction of CGI scripts for ErrorFiles ignored this check. :(

Sorry about this. Now I will go and stand in a corner for a month or so.