Re: release critical bug in apache2.2?

On 02.11.2006 20:16 schrieb sean finney: > On Thu, 2006-11-02 at 19:20 +0100, Mike Hommey wrote: >> Auto-indexes are enabled only in /var/www/apache2-default and >> /usr/share/apache2/icons by default, so it is not likely to leak any >> unexpected file list. >> >> So no, that doesn't grant an RC bu

Re: release critical bug in apache2.2?

On Sun, Nov 05, 2006 at 01:38:21PM +0100, Bastian Venthur <[EMAIL PROTECTED]> wrote: > On 02.11.2006 20:16 schrieb sean finney: > > On Thu, 2006-11-02 at 19:20 +0100, Mike Hommey wrote: > >> Auto-indexes are enabled only in /var/www/apache2-default and > >> /usr/share/apache2/icons by default, so

Re: release critical bug in apache2.2?

On 05.11.2006 14:04 schrieb Mike Hommey: > On Sun, Nov 05, 2006 at 01:38:21PM +0100, Bastian Venthur <[EMAIL PROTECTED]> > wrote: >> On 02.11.2006 20:16 schrieb sean finney: >>> On Thu, 2006-11-02 at 19:20 +0100, Mike Hommey wrote: Auto-indexes are enabled only in /var/www/apache2-default and

Re: release critical bug in apache2.2?

On Sun, Nov 05, 2006 at 02:36:02PM +0100, Bastian Venthur <[EMAIL PROTECTED]> wrote: > Here is what I've installed: > # dpkg --list | grep php | cut -d " " -f -3 > ii libapache2-mod-php5 > ii php5 > ii php5-common > > and: > > # cat /etc/apache2/sites-enabled/wiki > > ServerName wiki.loc

Re: release critical bug in apache2.2?

On Sun, 2006-11-05 at 14:04 +0100, Mike Hommey wrote: > > > > The file does not get executed as expected, but the browser wants to > > download it (which might be a security issue). > > Then it is likely that you don't have php installed. *or* that php is installed but not the modules isn't load

Re: release critical bug in apache2.2?

On 05.11.2006 14:44 schrieb Mike Hommey: > On Sun, Nov 05, 2006 at 02:36:02PM +0100, Bastian Venthur <[EMAIL PROTECTED]> > wrote: >> Here is what I've installed: >> # dpkg --list | grep php | cut -d " " -f -3 >> ii libapache2-mod-php5 >> ii php5 >> ii php5-common >> >> and: >> >> # cat /etc/apa

Re: release critical bug in apache2.2?

On 05.11.2006 14:49 schrieb sean finney: > On Sun, 2006-11-05 at 14:04 +0100, Mike Hommey wrote: >>> The file does not get executed as expected, but the browser wants to >>> download it (which might be a security issue). >> Then it is likely that you don't have php installed. > > *or* that php is

Re: release critical bug in apache2.2?

Le 5 nov. 06 à 14:49, sean finney a écrit : On Sun, 2006-11-05 at 14:04 +0100, Mike Hommey wrote: The file does not get executed as expected, but the browser wants to download it (which might be a security issue). Then it is likely that you don't have php installed. *or* that php is insta

Re: release critical bug in apache2.2?

Bastian Venthur wrote: > On 02.11.2006 20:16 schrieb sean finney: >> On Thu, 2006-11-02 at 19:20 +0100, Mike Hommey wrote: >>> Auto-indexes are enabled only in /var/www/apache2-default and >>> /usr/share/apache2/icons by default, so it is not likely to leak any >>> unexpected file list. >>> >>> So

ITP: neko -- High-level dynamically typed programming language

Package: wnpp Owner: Jens Peter Secher <[EMAIL PROTECTED]> Severity: wishlist * Package name: neko Version : 1.5 Upstream Author : Nicolas Cannasse (Motion-Twin) * URL or Web page : http://nekovm.org * License : LGPL Description : High-level dynamically typed programm

Re: release critical bug in apache2.2?

Hello! On Sun, 05 Nov 2006 21:13:14 +0100, Bastian Venthur wrote: > But the DirectoryIndex problem should be fixed nevertheless. FWIW, I've the following for apache2.2 on my sid: = [EMAIL PROTECTED]:~$ grep -r index.html /etc/apache2/* /etc/apache2/mods-available/dir.conf: \ Director

Bug#397236: ITP: asused -- To run a check on the usage of your registry's allocations

Package: wnpp Severity: wishlist Owner: Jan Wagner <[EMAIL PROTECTED]> * Package name: asused Version : 3.72 Upstream Author : RIPE <[EMAIL PROTECTED]> * URL : http://www.ripe.net/tools/ * License : BSD Programming Lang: Perl Description : To run a check

Re: Bug#396927: ITP: xyssl -- lightweight crypto and SSL/TLS library

Arnaud Cornet wrote: > * Package name: xyssl > Version : 0.1 > Upstream Author : Christophe Devine <[EMAIL PROTECTED]> > * URL : http://xyssl.org/ > * License : LGPL > Programming Lang: C > Description : lightweight crypto and SSL/TLS library Do you have

Bug#397257: ITP: otter -- resolution-style theorem prover

Package: wnpp Severity: wishlist Owner: Peter Collingbourne <[EMAIL PROTECTED]> * Package name: otter Version : 3.3f Upstream Author : William McCune <[EMAIL PROTECTED]> * URL : http://www.cs.unm.edu/~mccune/otter/ * License : public domain Programming Lang:

Bug#397260: ITP: picard -- Next generation MusicBrainz audio files tagger

Package: wnpp Severity: wishlist Owner: "Adam Cécile (Le_Vert)" <[EMAIL PROTECTED]> * Package name: picard Version : 0.7.2 Upstream Author : Robert Kaye <[EMAIL PROTECTED]> * URL : http://musicbrainz.org/doc/PicardTagger * License : Triple-licensed RCSL 1.0/RPSL

Proposed new POSIX sh policy (was: First draft of review of policy must usage)

Russ Allbery <[EMAIL PROTECTED]> writes: > Manoj Srivastava <[EMAIL PROTECTED]> writes: >> This flows from the Release policy. Not specifying /bin/bash >> in scripts is not considered a RC bug. > I can try to propose better language for this. I think that using pure > bash-specific cons

Re: release critical bug in apache2.2?

On Sun, Nov 05, 2006 at 10:48:10PM +0100, Luca Capello <[EMAIL PROTECTED]> wrote: > Hello! > > On Sun, 05 Nov 2006 21:13:14 +0100, Bastian Venthur wrote: > > But the DirectoryIndex problem should be fixed nevertheless. > > FWIW, I've the following for apache2.2 on my sid: > = > [EMAIL PROTEC

Re: release critical bug in apache2.2?

Mike Hommey wrote: > On Sun, Nov 05, 2006 at 10:48:10PM +0100, Luca Capello <[EMAIL PROTECTED]> > wrote: >> Hello! >> >> On Sun, 05 Nov 2006 21:13:14 +0100, Bastian Venthur wrote: >>> But the DirectoryIndex problem should be fixed nevertheless. >> FWIW, I've the following for apache2.2 on my sid: