CMS 1.3.2 RELEASE NOTES

Jump to bottom Edit New page

Luca Wehrstedt edited this page Aug 29, 2018 · 1 revision

Release date: August 29, 2018

Link to the package: https://github.com/cms-dev/cms/releases/download/v1.3.2/v1.3.2.tar.gz

CMS 1.3.2 is a small bugfix release. Due to a security vulnerability in ContestWebServer, we strongly suggest to update from previous versions.

What's new

Fix a security issue in CWS that could allow remote code execution by an attacker that knows the secret key.
Don't leak the names of the task in CWS before the start of the contest.