Commit Graph

4 Commits

Author SHA1 Message Date
naddy
3ef18e1e59 SECURITY: Add hotfix; from matt@
The issue involves a vulnerability involving "through the web code"
inadvertently allowing an untrusted user to remotely shut down a
Zope server by allowing the user to inject special headers into the
response. If you allow untrusted users to write "through the web"
code like Python Scripts, DTML Methods, or Page Templates, your
Zope server is vulnerable.
2002-04-17 16:04:01 +00:00
matt
e44d12be40 Upgrade to 2.5.1b1, as it's got a few important fixes, and nobody
knows if 2.5.1 is going to come out in time for the release.

Also add my patch to fix setuid support (not used by default) and
set our own version string to distinguish this from an "official"
Zope release.
2002-03-26 02:50:23 +00:00
matt
ce5fec9266 zope 2.5.0 2002-02-15 19:55:56 +00:00
matt
186a286ede - update to 2.4.3
- package spec for gtar
- distinfo
2001-11-21 01:33:12 +00:00