Bug#884463: passenger: CVE-2017-16355: arbitrary file read

2019-03-10 Thread Martin Chase
Hey, It looks like version 5.0.30 is not impacted by the CVE[1], and to the best of my abilities, I couldn't reproduce the insecure behavior. I didn't try to read through the source to see if a fix patch *might* still do something useful. Commit 4043718264095cde6623c2cbe8c644541036d7bf[2] does

Bug#562011: request-tracker3.6: users forced to log in multiple times

2009-12-21 Thread Martin Chase
Subject: request-tracker3.6: users forced to log in multiple times Package: request-tracker3.6 Version: 3.6.1-4+etch1 Severity: normal Since the last update, users are forced to log in once to see the main page, then again to look at a specific queue, and then again to see a ticket's details.

Bug#542680: ldm: ssh warnings force repetition of password entry

2009-08-20 Thread Martin Chase
Package: ldm Version: 2:2.0.42-2 Severity: normal -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 the warning happens on our systems when ssh adds rsa key for 10.2.2..., as we only have our hosts' keys listed by name. the problem with ldm is that this warning leads to ldm seeming to forget that

Bug#416868: ltsp-server: example dhcpd.conf fails to mention next-server

2007-03-30 Thread martin chase
Package: ltsp-server Version: 0.99debian11 Severity: important the docs need to reference the need to specify a next-server when using dhcp3. -- Package-specific info: packages in chroot: /opt/ltsp/i386 ii initramfs-tools 0.85ftools for generating an initramfs ii

Bug#356989: installer fails on raid setup

2006-03-14 Thread Martin Chase
Package: installation-reports Boot method: CD Image version: 2006-02-20 version 31r1 from a random mirror Date: 2006-03-14 12:00 UTC Machine: random, consumer-grade, desktop parts Processor: varied Memory: varied Partitions: 2 harddrives of different sizes, each with only an exactly

Bug#308740: clamav-daemon setup hangs

2005-05-12 Thread martin chase
hey stephen, On Thu, May 12, 2005 at 09:22:50AM -0400, Stephen Gran wrote: This one time, at band camp, [EMAIL PROTECTED] said: while doing the setup step for the upgrade of clamav-daemon, the process forks to ucf which hangs waiting for user input. Not here, at least. Can you provide