[Zope-Coders] FastCGI leaking Authorization header

Toby Dickenson tdickenson@geminidataloggers.com
Mon, 19 Aug 2002 17:27:19 +0100


> Can you think of a way to release a correction that wouldn't be
> interpreted by people outside this community as "Zope is totally
> insecure"?

IMO, It would be nice to be able to release 2.3.x, 2.4.x, and 2.5.x,=20
containing only critical changes such as this.

Historically Zope's third point releases have included a sufficiently bro=
ad=20
range of bug fixes that it has been unwise to upgrade without testing the=
m=20
first.