Re: diff for passenger in Squeeze

2015-12-30 Thread Thorsten Alteholz
Hi Guido and Antoine, thanks alot for looking at the patch, yes I forgot an exclamation mark. The patch has not been tested yet (this is next on my agenda). I only wanted to make sure that I am on the right track. Indeed, between those versions there has been a major rewrite and the version

Re: diff for passenger in Squeeze

2015-12-29 Thread Antoine Beaupré
On 2015-12-29 07:36:30, Guido Günther wrote: > Hi Thorsten, > > Isn't the logic reversed here? We want so _skip_ the header if it > containsNonAlphaNumDash not add it? After reviewing the patch, I agree, the logic is reversed. I am also not sure why the patch is so different - did the primitives

Re: diff for passenger in Squeeze

2015-12-29 Thread Guido Günther
Hi Thorsten, On Mon, Dec 28, 2015 at 11:13:32PM +0100, Thorsten Alteholz wrote: > Hi everybody, > > can someone please have a look at the diff for passenger=2.2.11debian-2 in > Squeeze that should solve CVE-2015-7519[1] and nod? > > Thanks! > Thorsten > > > [1]