Bug#686837: serveralias *

there is one workaround. if user has access to server confs, putting serveralias * (apache) avoids the bug. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#686837: openssl unaffected

i used this source for test http://ftp.de.debian.org/debian/pool/main/w/wget/wget_1.14.orig.tar.gz and tested gnutls, affected with the bug. when compiling openssl then bug doesn't occur. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe.

Bug#686837: i think i found the problem

i think i found the problem problem exist in 1.14 version but not 1.13 http://ftp.de.debian.org/debian/pool/main/w/wget/wget_1.14.orig.tar.gz in this source the file gnutls.c there is following /* We set the server name but only if it's not an IP address. */ if (! is_valid_ip_address

Bug#686837: slightly more info

my apologies, but im concerned of my privacy . this is my spambox address, i don't like to post my web server addresses. and also this information will be publicly available and debian servers forever. in this configuration there are two ports 8001 and 8002. difference is different servername