CMS 1.3.2 RELEASE NOTES

[Luca Wehrstedt]

Release date: August 29, 2018

Link to the package: https://github.com/cms-dev/cms/releases/download/v1.3.2/v1.3.2.tar.gz

CMS 1.3.2 is a small bugfix release. Due to a security vulnerability in ContestWebServer, we strongly suggest to update from previous versions.

What's new

----------

- Fix a security issue in CWS that could allow remote code execution by an attacker that knows the secret key. For more information see the separate email announcement: https://groups.google.com/d/msg/contestms-announce/QyWi7FSIHc0/a8Y5dZYjBAAJ

- Don't leak the names of the task in CWS before the start of the contest.