Hi. I just released mathopd 1.5p5 and 1.6b6.
The new version fixes a problem in internal_dump() that could be exploited to
append to arbitrary files writable by the server's UID. Thanks to Carsten Eiram
for pointing this out.
Internal dumps will now create files in /tmp with unpredictable filenames. As a
side effect, each dump will be in a separate file.
I also fixed a compile-time warning on 64-bit platforms while I was there.
Cheers
Michiel