[MapProxy-dev] MapProxy security issue in demo service

[Johannes Weskamm]

Hi,


I released MapProxy 1.13.1 containing this fix, but also the latest
feature from master (https://github.com/mapproxy/mapproxy/pull/482)


Greetings,

Johannes


Am 12.07.21 um 10:47 schrieb Oliver Tonnhofer:
> Hi all,
>
> Samuel Curry found a security issue in old but still essential code for the demo service.
> Please check https://github.com/mapproxy/mapproxy/issues/526
>
> Disabling the demo service is the quickest solution. I pushed a fix into master and a new 1.13.x branch.
> I think we should publish a 1.13.1 release with this fix soon.
>
> I will write to mapproxy@ list as well.
>
> Kind regards,
> Oliver
> _______________________________________________
> MapProxy-dev mailing list
> MapProxy-dev at lists.osgeo.org
> https://lists.osgeo.org/mailman/listinfo/mapproxy-dev
>
-- 
Dipl.-Geogr. Johannes Weskamm
  — Anwendungsentwickler —

  terrestris GmbH & Co. KG
  Kölnstraße 99
  53111 Bonn

  Tel: +49 (0)228 / 96 28 99 -51
  Fax: +49 (0)228 / 96 28 99 -57

  Email: weskamm at terrestris.de
  Web: https://www.terrestris.de

  Amtsgericht Bonn, HRA 6835
  Komplementärin: terrestris Verwaltungsgesellschaft mbH
  vertreten durch: Torsten Brassat, Marc Jansen
  
  Informationen über Ihre gespeicherten Daten finden Sie auf
  unserer Homepage unter folgendem Link: 
  https://www.terrestris.de/datenschutzerklaerung/