Processed: Re: Bug#436520: There is no policy on HTTP_PROXY variable, can we create one?

2007-08-17 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: retitle 436520 There is no policy on HTTP_PROXY variable Bug#436520: apt-listbugs: does not work with $http_proxy Changed Bug title to `There is no policy on HTTP_PROXY variable' from `apt-listbugs: does not work with $http_proxy'. (By the way, that

Bug#436520: There is no policy on HTTP_PROXY variable, can we create one?

2007-08-17 Thread Junichi Uekawa
Hi, HTTP_PROXY, or http_proxy (and ftp_proxy) is used in many applications within Debian. There is a well-known remote attack using HTTP_* variables can be set to arbitrary values for CGI scripts, and thus there is a need for protection against that. Is there any reason why

Bug#436520: There is no policy on HTTP_PROXY variable, can we create one?

2007-08-17 Thread Don Armstrong
On Fri, 17 Aug 2007, Mike Hommey wrote: On Thu, Aug 16, 2007 at 07:34:51PM -0700, Don Armstrong [EMAIL PROTECTED] wrote: On Fri, 17 Aug 2007, Junichi Uekawa wrote: HTTP_PROXY, or http_proxy (and ftp_proxy) is used in many applications within Debian. There is a well-known remote

Processed (with 1 errors): There is no policy on HTTP_PROXY variable, can we create one?

2007-08-16 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: reassign 436520 general Bug#436520: apt-listbugs: does not work with $http_proxy Bug reassigned from package `apt-listbugs' to `general'. retitle There is no policy on HTTP_PROXY variable Unknown command or malformed arguments to command. thanks

There is no policy on HTTP_PROXY variable, can we create one?

2007-08-16 Thread Junichi Uekawa
reassign 436520 general retitle There is no policy on HTTP_PROXY variable thanks Hi, I'm reassigning this bug to Debian in general. I feel a Deja-Vu about this, I thought I already discussed it somewhere but cannot find it anywhere. HTTP_PROXY, or http_proxy (and ftp_proxy) is used in many

Bug#436520: There is no policy on HTTP_PROXY variable, can we create one?

2007-08-16 Thread Don Armstrong
On Fri, 17 Aug 2007, Junichi Uekawa wrote: HTTP_PROXY, or http_proxy (and ftp_proxy) is used in many applications within Debian. There is a well-known remote attack using HTTP_* variables can be set to arbitrary values for CGI scripts, and thus there is a need for protection against that.

Bug#436520: There is no policy on HTTP_PROXY variable, can we create one?

2007-08-16 Thread Mike Hommey
On Thu, Aug 16, 2007 at 07:34:51PM -0700, Don Armstrong [EMAIL PROTECTED] wrote: On Fri, 17 Aug 2007, Junichi Uekawa wrote: HTTP_PROXY, or http_proxy (and ftp_proxy) is used in many applications within Debian. There is a well-known remote attack using HTTP_* variables can be set to