> It would be good to hear [f]rom soeone else who has looked into this enough > to be sure that's right and who has tested the new version. I'm running it in production. I cannot confirm that it fixes the vulnerabilites, though. An exploit, anyone, so I can check?