[mapserver-dev] Motion: Adopt RFC-56 and release MapServer 4.10.4and 5.2.2

[Steve Lime]

+1

>>> On 3/26/2009 at 1:20 PM, in message <49CBC751.7040902 at mapgears.com>, Daniel
Morissette <dmorissette at mapgears.com> wrote:
> Some security vulnerabilities have been found and reported to us 
> following an audit of MapServer's mapserv CGI. We have worked on this 
> off-list with other PSC members to come up with a solution before making 
> anything public.
> 
> The outcome of this is five tickets (#2939, #2941, #2942, #2943, #2944) 
> and corresponding fixes:
>    http://trac.osgeo.org/mapserver/ticket/2939 
>    http://trac.osgeo.org/mapserver/ticket/2941 
>    http://trac.osgeo.org/mapserver/ticket/2942 
>    http://trac.osgeo.org/mapserver/ticket/2943 
>    http://trac.osgeo.org/mapserver/ticket/2944 
> 
> as well as a new RFC-56 about tightening up control of access to 
> mapfiles and templates:
>    http://mapserver.org/development/rfc/ms-rfc-56.html 
> 
> 
> Motion:
> 
> I hereby motion that we release MapServer 5.2.2 and 4.10.4 ASAP with 
> fixes for tickets (#2939, #2941, #2942, #2943, #2944) and the 
> implementation of RFC-56. MapServer 5.4.0 beta4 should also follow 
> within a few days with the same fixes.
> 
> I start with my +1
> 
> Daniel