Your message dated Thu, 06 Dec 2018 13:05:26 +0000
with message-id <e1gutlk-00017a...@fasolo.debian.org>
and subject line Bug#877039: fixed in lighttpd 1.4.52-1
has caused the Debian Bug report #877039,
regarding ":80" is appended to socket file name
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
877039: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877039
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: lighttpd
Version: 1.4.45-1
If the server is bound to a socket in file system, three characters :80 are
appended to the file path, breaking my reverse proxy setup.
Minimal example:
jonny@heron:/var/tmp/ltest$ lighttpd -D -f config &
[1] 30888
jonny@heron:/var/tmp/ltest$ 2017-09-28 00:26:22: (log.c.217) server started
jonny@heron:/var/tmp/ltest$ ls
config lighty.pid lighty.sock:80
jonny@heron:/var/tmp/ltest$ cat config
server.document-root = "/var/tmp/ltest/"
index-file.names = ( "index.html", "index.lighttpd.html" )
server.bind = "/var/tmp/ltest/lighty.sock"
server.errorlog = "/dev/tty"
server.pid-file = "/var/tmp/ltest/lighty.pid"
dir-listing.activate = "enable"
# ---------- end of lighttpd config.
expected: a socket "lighty.sock" without :80
jonny@heron:~$ dpkg -s libc6 | grep ^Version
Version: 2.24-17
jonny@heron:~$ uname -a
Linux heron 4.11.0-1-amd64 #1 SMP Debian 4.11.6-1 (2017-06-19) x86_64 GNU/Linux
I think the source lines appending the port are src/network.c,
buffer_copy_buffer(b, srv->srvconf.bindhost);
buffer_append_string_len(b, CONST_STR_LEN(":"));
buffer_append_int(b, srv->srvconf.port);
I remember my setup to work some time ago (jessie or something older)
--- End Message ---
--- Begin Message ---
Source: lighttpd
Source-Version: 1.4.52-1
We believe that the bug you reported is fixed in the latest version of
lighttpd, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 877...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Helmut Grohne <helmut.gro...@intenta.de> (supplier of updated lighttpd package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 06 Dec 2018 13:44:42 +0100
Source: lighttpd
Binary: lighttpd lighttpd-doc lighttpd-mod-mysql-vhost
lighttpd-mod-trigger-b4-dl lighttpd-mod-cml lighttpd-mod-magnet
lighttpd-mod-webdav lighttpd-mod-authn-gssapi lighttpd-mod-authn-ldap
lighttpd-mod-authn-mysql lighttpd-mod-geoip
Architecture: source
Version: 1.4.52-1
Distribution: sid
Urgency: medium
Maintainer: Debian QA Group <packa...@qa.debian.org>
Changed-By: Helmut Grohne <helmut.gro...@intenta.de>
Description:
lighttpd - fast webserver with minimal memory footprint
lighttpd-doc - documentation for lighttpd
lighttpd-mod-authn-gssapi - GGSAPI authentication for lighttpd
lighttpd-mod-authn-ldap - LDAP authentication for lighttpd
lighttpd-mod-authn-mysql - MySQL authentication for lighttpd
lighttpd-mod-cml - cache meta language module for lighttpd
lighttpd-mod-geoip - GeoIP restrictions for lighttpd
lighttpd-mod-magnet - control the request handling module for lighttpd
lighttpd-mod-mysql-vhost - MySQL-based virtual host configuration for lighttpd
lighttpd-mod-trigger-b4-dl - anti-deep-linking module for lighttpd
lighttpd-mod-webdav - WebDAV module for lighttpd
Closes: 857255 877039 879496 913528
Changes:
lighttpd (1.4.52-1) unstable; urgency=medium
.
* QA Upload.
* New upstream release. (Closes: #879496)
+ Fix CVE-2018-19052. (Closes: #913528)
+ Don't append port to unix sockets. (Closes: #877039)
+ Refactor buffer API. (Closes: #857255)
+ Don't use AC_PATH_PROG to find pkg-config. (Addresses: #912358)
+ Drop patch fix-openssl-1.1.1.patch applied upstream.
+ Add new mod_sockproxy.so to main package.
* Replace Build-Depends: dh-systemd with newer debhelper for lintian.
Checksums-Sha1:
f83569abd053a4a4142bd6445a14fe5a02cfc1ca 3164 lighttpd_1.4.52-1.dsc
d2cc3d8b4997e73b0d8bf3fd2685fc0e79650385 728668 lighttpd_1.4.52.orig.tar.xz
2eca58e718d9567083b7aad2a1be723cf3deba19 801 lighttpd_1.4.52.orig.tar.xz.asc
3baaa543bdf03c86d8e63ae19e062e0798d89f5d 47008 lighttpd_1.4.52-1.debian.tar.xz
9830b4a05d827c9e72c12173650296508f0507a5 13155
lighttpd_1.4.52-1_amd64.buildinfo
Checksums-Sha256:
bab3dc02ee868bafed693e94c0b565cc924ebd4d0d960ca4e0d404aecb38ad27 3164
lighttpd_1.4.52-1.dsc
27bc0991c530b7c6335e6efff2181934d3c1a1c516f7401ea71d8302cefda764 728668
lighttpd_1.4.52.orig.tar.xz
fd8b589ec181f2d166fcadd71acf2e0b95c0c9ca8db96af2329d3a5a5efb2177 801
lighttpd_1.4.52.orig.tar.xz.asc
40ebebd86ba93933dd7eae31e4b0693a0b04299e991c51796fff18afc29cbe19 47008
lighttpd_1.4.52-1.debian.tar.xz
1d65294c2112cfd344926224ae6614a708206febb9fca44bbbcc58e0e23b0ccc 13155
lighttpd_1.4.52-1_amd64.buildinfo
Files:
b334c8de0c5073d1665513281742a4f6 3164 httpd optional lighttpd_1.4.52-1.dsc
34f5c79137325ba31484bed1e54e66e6 728668 httpd optional
lighttpd_1.4.52.orig.tar.xz
14cbef98f3d645b8ca380c7f8cbd186a 801 httpd optional
lighttpd_1.4.52.orig.tar.xz.asc
264d0d39104a12ee68b096d394c9c111 47008 httpd optional
lighttpd_1.4.52-1.debian.tar.xz
e2e357134aa1f2bee22773b4163396d0 13155 httpd optional
lighttpd_1.4.52-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=S5y/
-----END PGP SIGNATURE-----
--- End Message ---
