Your message dated Sun, 03 May 2009 15:32:03 +0000
with message-id <[email protected]>
and subject line Bug#526010: fixed in dhelp 0.6.17
has caused the Debian Bug report #526010,
regarding default conf is not IPv6-safe: break CGI doc retrieval/search with
default Debian setup
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
526010: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526010
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: dhelp
Version: 0.6.16
Severity: important
File: /etc/apache2/conf.d/dhelp.conf
Tags: patch
Due to a recent change in libc6 (Debian/unstable), resolving
"localhost" will most likely return "::1" as IP address instead of
plain old "127.0.0.1". The default apache configuration provided by
dhelp.conf relies on localhost being "127.*.*.*" to have URLs like
http://localhost/doc/SOMETHING work for doc-base document retrieval
and search. If "localhost" resolves to "::1", the user will get a
"permission denied" error while executing one of
/usr/lib/cgi-bin/{dhelp_fetcher,dsearch}.
To fix this it is enough to change the apache configuration snippet so
that it matches over "localhost" instead of matching over "127.*.*.*.
Patch attached.
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.29-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages dhelp depends on:
ii doc-base 0.9.1 utilities to manage online documen
ii libcommandline-ruby1.8 0.7.10-10 Ruby library to write command-line
ii libdata-page-perl 2.01-1 Help when paging through sets of r
ii libdb-ruby1.8 0.6.5-3 Interface to Berkeley DB for Ruby
ii libgettext-ruby1.8 1.93.0-1 Gettext for ruby1.8
ii libhtml-parser-perl 3.60-1 collection of modules that parse H
ii liblocale-gettext-perl 1.05-4 Using libc functions for internati
ii libtemplate-perl 2.20-1 template processing system written
ii liburi-perl 1.37+dfsg-1 Manipulates and accesses URI strin
ii perl-modules 5.10.0-19 Core Perl modules
ii pstotext 1.9-4 Extract text from PostScript and P
ii ruby1.8 1.8.7.72-3.1 Interpreter of object-oriented scr
ii swish++ 6.1.5-2 Simple Document Indexing System fo
ii xpdf-utils 3.02-1.4 Portable Document Format (PDF) sui
Versions of packages dhelp recommends:
ii epiphany-gecko [www-browser 2.24.3-2 Intuitive GNOME web browser - Geck
ii galeon [www-browser] 2.0.6-2.1+b2 GNOME web browser for advanced use
ii iceweasel [www-browser] 3.0.9-1 lightweight web browser based on M
ii lynx-cur [www-browser] 2.8.7pre1-1 Text-mode WWW Browser with NLS sup
ii w3m [www-browser] 0.5.2-2+b1 WWW browsable pager with excellent
Versions of packages dhelp suggests:
ii apache2-mpm-worker [httpd] 2.2.11-3 Apache HTTP Server - high speed th
pn catdvi <none> (no description available)
ii html2text 1.3.2a-13 advanced HTML to text converter
ii info2www 1.2.2.9-24 Read info files with a WWW browser
pn man2html <none> (no description available)
ii w3m 0.5.2-2+b1 WWW browsable pager with excellent
-- no debconf information
diff -Naur dhelp-0.6.16.orig/apache-dhelp.conf dhelp-0.6.16/apache-dhelp.conf
--- dhelp-0.6.16.orig/apache-dhelp.conf 2009-04-28 18:34:24.168265535 +0200
+++ dhelp-0.6.16/apache-dhelp.conf 2009-04-28 18:34:36.196310611 +0200
@@ -1,13 +1,13 @@
<Location /cgi-bin/dsearch>
order deny,allow
deny from all
- allow from 127.0.0.0/255.0.0.0
+ allow from localhost
Options Indexes FollowSymLinks MultiViews
</Location>
<Location /cgi-bin/dhelp_fetcher>
order deny,allow
deny from all
- allow from 127.0.0.0/255.0.0.0
+ allow from localhost
Options Indexes FollowSymLinks MultiViews
</Location>
--- End Message ---
--- Begin Message ---
Source: dhelp
Source-Version: 0.6.17
We believe that the bug you reported is fixed in the latest version of
dhelp, which is due to be installed in the Debian FTP archive:
dhelp_0.6.17.dsc
to pool/main/d/dhelp/dhelp_0.6.17.dsc
dhelp_0.6.17.tar.gz
to pool/main/d/dhelp/dhelp_0.6.17.tar.gz
dhelp_0.6.17_all.deb
to pool/main/d/dhelp/dhelp_0.6.17_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Esteban Manchado Velázquez <[email protected]> (supplier of updated dhelp package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sun, 03 May 2009 17:15:05 +0200
Source: dhelp
Binary: dhelp
Architecture: source all
Version: 0.6.17
Distribution: unstable
Urgency: low
Maintainer: Esteban Manchado Velázquez <[email protected]>
Changed-By: Esteban Manchado Velázquez <[email protected]>
Description:
dhelp - online help system
Closes: 526010
Changes:
dhelp (0.6.17) unstable; urgency=low
.
* Take into account index files when registering directories.
* Added Indonesian translation (thanks Atoz Chevara).
* Match 'localhost' instead of IPs in Apache config files (Closes: #526010).
Thanks Stefano Zacchiroli.
Checksums-Sha1:
23f803a37cbc822f8c09e892c9f782bcd3cd206f 788 dhelp_0.6.17.dsc
7e18428a54788149195b6c5527645e1a66fedf3c 52208 dhelp_0.6.17.tar.gz
868db25264e7370df1ebdea2f89ec5f00fe37be7 42118 dhelp_0.6.17_all.deb
Checksums-Sha256:
fcfc0dded5aa1356d845c0881f4c451056b8a52a214790b3429c228e0a0c559a 788
dhelp_0.6.17.dsc
d3f8759efe1ff5c7b2cd23193ef01b69dcc6c5917c2a64d5beed92e70c30013d 52208
dhelp_0.6.17.tar.gz
26d82a05e0a957f57cb8851f7d8788809454da6721408d08daaea6475052ff94 42118
dhelp_0.6.17_all.deb
Files:
9a5c353d19333bfb01fc18cbac5418d4 788 doc optional dhelp_0.6.17.dsc
966e431418b7439cc4f08b65824b62f1 52208 doc optional dhelp_0.6.17.tar.gz
86e45ebe02a2177c6dabf7e9fd3e03bc 42118 doc optional dhelp_0.6.17_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFJ/bWRhYgK5b1UDsERAkdxAJ9zJ+icHanIDFA4wAD8KaV3VCmK/QCeLSGu
m5yZJE3vg6A17g1Dp71dGEg=
=aNfL
-----END PGP SIGNATURE-----
--- End Message ---
