The patch included in 3.1.0-7 doesn't actually fix the problem. Normal users can still set the ClientNameAlias by adding something like "&override_ClientNameAlias=1&v_zZ_ClientNameAlias=xxxx" to their POST.
Marc. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
