Uploaded zope 2.1.4-1 (arm) to master
-----BEGIN PGP SIGNED MESSAGE-----
Format: 1.6
Date: Fri, 11 Feb 2000 11:46:29 +0100
Source: zope
Binary: zope
Architecture: arm
Version: 2.1.4-1
Distribution: frozen unstable
Urgency: high
Maintainer: jim@federated.com
Description:
zope - The Z Object Publishing Environment
Changes:
zope (2.1.4-1) frozen unstable; urgency=high
.
* New upstream release, which is only a security bug fix release:
.
- Removed the "feature" that allowed the REQUEST object to be traversed
through the web. While useful for debugging, this could be a security
issue.
.
There's only this single (four lines) change compared with 2.1.3-1.
Therefore, the package can go into frozen.
.
If you made use of this feature, it's still possible to use it with
2.1.4: "Simply make a DTML Method in your root folder called 'DEBUG'
(or something similar) containing the line: <dtml-var REQUEST>
and set its permissions so that only Managers can view it."
Files:
a52401f4dfd23db054ae3df2adaa9bfc 1134648 web optional zope_2.1.4-1_arm.deb
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
iQCVAwUBOKn/pzb8oJEootMxAQHSwQQAjUCChKkjY9l0g6grrSedZOL5bfM2x5+l
EuCcdrkl6fdFGouGieyUWZoqbyb0TRS9eVIKXAsiUWHlhW3D4SEbfkufZnOFdmA7
TGmm2Q9euGyhqMFI1SRNwsJncF1sbYUbFw3nqWDDSFC4er2fRnTZpkiKN1Alkc5Y
vNBWVhoJ17M=
=SzEJ
-----END PGP SIGNATURE-----
Reply to: