[Maia-users] Important: Security Alert

[Robert LeBlanc]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Farkas Levente wrote:

> wouldn't be useful in this case to release 1.0.3 as a security fix release?

The 1.0.3 release was due in the next few weeks anyway (technically it
was due now, but the website data loss set us back a bit), including a
few new features and bunch of existing bug fixes.  It seems a bit silly
to release a 1.0.3 security release now and a 1.0.4 release in 2-3 weeks.

That said, a repackaged security release--perhaps "1.0.2a"--should
replace the 1.0.2 distribution in the meantime, so that new downloaders
don't need to patch their systems.  This would simply be the 1.0.2
distribution patched for this vulnerability; it would not include any
other fixes from the repository--those will come in 1.0.3.

- --
Robert LeBlanc <rjl at renaissoft.com>
Renaissoft, Inc.
Maia Mailguard <http://www.maiamailguard.com/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGjqaUGmqOER2NHewRAiwbAJ9/icSPqeWXBWK6ohmD57ChNFC/4QCdHzOo
eObbJN/VgRmwmUAdoocQOqo=
=qYgE
-----END PGP SIGNATURE-----