[Zope-Coders] FastCGI leaking Authorization header

[Florent Guillaume]

Shane Hathaway  <shane@zope.com> wrote:
> Perhaps it's just a case of choosing the right words then.  We've released
> a lot of hotfixes that were "highly recommended", when they really only
> affected a few people, and didn't actually improve security much.  (The
> folks over at Mandrake won't even look at Zope these days because of the
> current perception.)

Is it really the reason they're not packaging it? It thought it was more
of a manpower or installed base problem.

FWIW Jean-Paul Smets has Mandrake RPMS:
http://www.nexedi.org/Members/jp/zope-mdk

(BTW Mandrake has other problems wrt Zope, they have only Python 2.1.1
or Python 2.2.1, no 2.1.3. Same for RedHat really. Debian got that
right.)

Florent

-- 
Florent Guillaume, Nuxeo (Paris, France)
+33 1 40 33 79 87  http://nuxeo.com  mailto:fg@nuxeo.com