Package: ikiwiki
Version: 3.20130904.1
Severity: normal

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

An ikiwiki setup of mine have failed uploading attachments since at
least January 2015.  December 2014 I upgraded libcgi-pm-perl from 4.03
to 4.09-1 on that host...

CGI.pm 4.05 includes a change to tempfile handling and warns that "If
you are doing anything out of the ordinary with regards to temp files
you should test your code before deploying this update".

Ikiwiki attachment plugin seems to inspect internal structure of the
tempfile which smells exactly like the kind of thing warned about.

Reverting back to libcgi-pm-perl 4.03 and rebuilding the Ikiwiki CGI
indeed makes attachment uploads work again.


 - Jonas

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=Ht2t
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to