RE: SECURITY BUG in CVS 1.11.1

[Douglas Finkle]

> > Douglas Finkle writes:
> > 
> > Sorry, but can you provide a reference url, or ftp 
> > path for this update?
> > I checked out on 
> http://ccvs.cvshome.org/servlets/ProjectDownloadList
> > and the last version posted was v1.11p1 on 2001-10-16.
> 
> Sorry for the confusion -- at the moment, the fix is only in 
> the current
> development version of the code, it is not yet in a released version. 
> Anyone can get the current development version source code by checking
> it out of CVS: see the checkout instructions at:
> 
>       <http://ccvs.cvshome.org/servlets/ProjectSource>


Is there any chance of you offering this as a smaller step by publishing the
fix as a patch?  I'd feel much more comfortable applying a small patch
vs replacing the entire tool w/ a development version. I imagine many
others would feel similarly.

A cvs diff of the files requiring the fix would be most appreciatiated.

Regards,
Doug