Bug#404297: webcalendar: default Debian config has register_globals on

2006-12-24 Thread Moritz Muehlenhoff
Stephen Gran wrote: This one time, at band camp, Thijs Kinkhorst said: Given that: * Webcalendar has had two unacknowledged NMU's; * The maintainer hasn't been active since 2005 in Debian with one exception an upload in April; * There's been a significant number of webcalendar

Bug#404297: webcalendar: default Debian config has register_globals on

2006-12-24 Thread Andreas Barth
* Moritz Muehlenhoff ([EMAIL PROTECTED]) [061224 14:19]: I agree that it should be removed. It has had five DSAs in the last 15 months and I don't see it improving. tagged for removal from testing. Cheers, Andi -- http://home.arcor.de/andreas-barth/ -- To UNSUBSCRIBE, email to [EMAIL

Bug#404297: webcalendar: default Debian config has register_globals on

2006-12-23 Thread Thijs Kinkhorst
Package: webcalendar Version: 1.0.4-1 Severity: serious Tags: security Hi, When doing a default Debian install of webcalendar, you end up with a configuration that has register_globals set to On: DirectoryMatch /usr/share/webcalendar/www/ Options +FollowSymLinks

Bug#404297: webcalendar: default Debian config has register_globals on

2006-12-23 Thread Stephen Gran
This one time, at band camp, Thijs Kinkhorst said: Given that: * Webcalendar has had two unacknowledged NMU's; * The maintainer hasn't been active since 2005 in Debian with one exception an upload in April; * There's been a significant number of webcalendar security issues in the