Your message dated Sun, 22 May 2011 08:47:44 +0000 with message-id <e1qo4k8-0001z8...@franck.debian.org> and subject line Bug#539246: fixed in apache2 2.2.19-1 has caused the Debian Bug report #539246, regarding Truncation with passwords generated with htpasswd to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 539246: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539246 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: apache2-utils Version: 2.2.9-10+lenny8 -- System Information: Debian Release: 5.0.7 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.26-2-686 (SMP w/1 CPU core) Locale: LANG=es_AR.UTF-8, LC_CTYPE=es_AR.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages apache2-utils depends on: ii libapr1 1.2.12-5+lenny2 The Apache Portable Runtime Library ii libaprutil1 1.2.12+dfsg-8+lenny5 The Apache Portable Runtime Utility ii libc6 2.7-18lenny6 GNU C Library: Shared libraries ii libssl0.9.8 0.9.8g-15+lenny9 SSL shared libraries apache2-utils recommends no packages. apache2-utils suggests no packages. -- no debconf information Procedure to generate the password: htpasswd -c /etc/apache2/htpasswd/mysite.htpasswd operador In tests with passwords longer than eight characters, passwords are also valid when more than eight characters and less than the total characters of the original password are introduced. Example: Original password: nienpedoteladigo Tests: nienpedo -> password ok. nienpedot -> password ok. nienpedote -> passowrd ok. nienpedotel -> password ok. nienpedotela -> password ok. nienpedotelad -> password ok. [...] nienpedoteladigodenuevo -> password ok. Regards, Daniel -- Daniel Bareiro - GNU/Linux registered user #188.598 Proudly running Debian GNU/Linux with uptime: 07:23:55 up 61 days, 7:50, 10 users, load average: 0.00, 0.00, 0.00signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---Source: apache2 Source-Version: 2.2.19-1 We believe that the bug you reported is fixed in the latest version of apache2, which is due to be installed in the Debian FTP archive: apache2-dbg_2.2.19-1_i386.deb to main/a/apache2/apache2-dbg_2.2.19-1_i386.deb apache2-doc_2.2.19-1_all.deb to main/a/apache2/apache2-doc_2.2.19-1_all.deb apache2-mpm-event_2.2.19-1_i386.deb to main/a/apache2/apache2-mpm-event_2.2.19-1_i386.deb apache2-mpm-itk_2.2.19-1_i386.deb to main/a/apache2/apache2-mpm-itk_2.2.19-1_i386.deb apache2-mpm-prefork_2.2.19-1_i386.deb to main/a/apache2/apache2-mpm-prefork_2.2.19-1_i386.deb apache2-mpm-worker_2.2.19-1_i386.deb to main/a/apache2/apache2-mpm-worker_2.2.19-1_i386.deb apache2-prefork-dev_2.2.19-1_i386.deb to main/a/apache2/apache2-prefork-dev_2.2.19-1_i386.deb apache2-suexec-custom_2.2.19-1_i386.deb to main/a/apache2/apache2-suexec-custom_2.2.19-1_i386.deb apache2-suexec_2.2.19-1_i386.deb to main/a/apache2/apache2-suexec_2.2.19-1_i386.deb apache2-threaded-dev_2.2.19-1_i386.deb to main/a/apache2/apache2-threaded-dev_2.2.19-1_i386.deb apache2-utils_2.2.19-1_i386.deb to main/a/apache2/apache2-utils_2.2.19-1_i386.deb apache2.2-bin_2.2.19-1_i386.deb to main/a/apache2/apache2.2-bin_2.2.19-1_i386.deb apache2.2-common_2.2.19-1_i386.deb to main/a/apache2/apache2.2-common_2.2.19-1_i386.deb apache2_2.2.19-1.diff.gz to main/a/apache2/apache2_2.2.19-1.diff.gz apache2_2.2.19-1.dsc to main/a/apache2/apache2_2.2.19-1.dsc apache2_2.2.19-1_i386.deb to main/a/apache2/apache2_2.2.19-1_i386.deb apache2_2.2.19.orig.tar.gz to main/a/apache2/apache2_2.2.19.orig.tar.gz A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 539...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Stefan Fritsch <s...@debian.org> (supplier of updated apache2 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 22 May 2011 10:21:21 +0200 Source: apache2 Binary: apache2.2-common apache2.2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2-utils apache2-suexec apache2-suexec-custom apache2 apache2-doc apache2-prefork-dev apache2-threaded-dev apache2-dbg Architecture: source all i386 Version: 2.2.19-1 Distribution: unstable Urgency: low Maintainer: Debian Apache Maintainers <debian-apache@lists.debian.org> Changed-By: Stefan Fritsch <s...@debian.org> Description: apache2 - Apache HTTP Server metapackage apache2-dbg - Apache debugging symbols apache2-doc - Apache HTTP Server documentation apache2-mpm-event - Apache HTTP Server - event driven model apache2-mpm-itk - multiuser MPM for Apache 2.2 apache2-mpm-prefork - Apache HTTP Server - traditional non-threaded model apache2-mpm-worker - Apache HTTP Server - high speed threaded model apache2-prefork-dev - Apache development headers - non-threaded MPM apache2-suexec - Standard suexec program for Apache 2 mod_suexec apache2-suexec-custom - Configurable suexec program for Apache 2 mod_suexec apache2-threaded-dev - Apache development headers - threaded MPM apache2-utils - utility programs for webservers apache2.2-bin - Apache HTTP Server common binary files apache2.2-common - Apache HTTP Server common files Closes: 394688 539246 560020 627061 Changes: apache2 (2.2.19-1) unstable; urgency=low . * New upstream release. - Makes apr-md5 the default algorithm for htpasswd, removing the 8 character limit of the crypt()-algorithm. Closes: #539246 - Fixes merging of IndexOptions. Closes: #394688 - Documents why order of ProxyPass and <Proxy> blocks matters in the configuration. See "Workers" section in the mod_proxy documentation. Closes: #560020 * For multiple instance setups, correctly determine the config dir in the init script if it is called via a start/stop link. Closes: #627061 * Make a2enmod's restart hint more cut'n'paste friendly. LP: #770204 * Make it clear in README.multiple-instances that the MPMs are shipped in the apache2.2-bin package. Checksums-Sha1: 0d44a84753bc623401517f8835a80ffb737f09f7 1783 apache2_2.2.19-1.dsc ca6f20e2afd083f3c07de9930d967c4b947b831f 7113418 apache2_2.2.19.orig.tar.gz a46fb9ac511bb570192ed0db3c0be1ffa5f8fc37 206517 apache2_2.2.19-1.diff.gz 26b2596e1d89f26bbec5aa9211232c3970570392 2660834 apache2-doc_2.2.19-1_all.deb 173ac97bdbedf901653473abceddd97082ec1f74 312640 apache2.2-common_2.2.19-1_i386.deb 13aac9f5f9c90d638530055ec67393211d9d69cc 1449086 apache2.2-bin_2.2.19-1_i386.deb c05d7ccba9d87cf64be371451aac225f31d91183 2186 apache2-mpm-worker_2.2.19-1_i386.deb 29481e1c17ad79a35a31f3adf461f6e5b37b8300 2280 apache2-mpm-prefork_2.2.19-1_i386.deb df233063727c76bd4c982f1823bd49b626a7dbbd 2252 apache2-mpm-event_2.2.19-1_i386.deb e6eebe447021b5dd4ac7cbe344dca205be6e6902 2284 apache2-mpm-itk_2.2.19-1_i386.deb 748aeb16f96e1dd43cc25bb5bcf838d2de66ae3f 167870 apache2-utils_2.2.19-1_i386.deb a31eb28fb0686aa450541cbe550220b77947ef91 102016 apache2-suexec_2.2.19-1_i386.deb 8b7c7dfd342f895373345d8ec255a4f37a63ae08 103632 apache2-suexec-custom_2.2.19-1_i386.deb 61c3b0faf9ce1b17297cfb14128b8c28baa37965 1384 apache2_2.2.19-1_i386.deb 0c5619679567819b76dfef80734ce8b817fa4881 137740 apache2-prefork-dev_2.2.19-1_i386.deb ed6f180fd1cfff082e9a01f9272bd23e3268f9f9 138926 apache2-threaded-dev_2.2.19-1_i386.deb e024098d40cdad67ee26a4d929426b53d7d1cac8 2797994 apache2-dbg_2.2.19-1_i386.deb Checksums-Sha256: af262511180be38cabfd9278e470c9254ef7c52116ae18fd039b69c256a362de 1783 apache2_2.2.19-1.dsc fe73c3d0817f6d0fcf5a58c6fd0729a1160c25b40f729ac6306ad68bb18df7f8 7113418 apache2_2.2.19.orig.tar.gz 1728dac76e5cef14f7791c4d1967cf9cc7ba32fde6aa17b76e0c9b1181167624 206517 apache2_2.2.19-1.diff.gz 6098e3031c065e31d78d248a7c50ccf097a54ecccf1c0502b4e9f397491dbcd4 2660834 apache2-doc_2.2.19-1_all.deb afda7d597cf7efb0630219eb46c6ed545f45adcadaf6e36ce232df3697590fc3 312640 apache2.2-common_2.2.19-1_i386.deb aab56558fee6e6a84517a2d10af07571539b451acb0504d87882a043bdb5eb7c 1449086 apache2.2-bin_2.2.19-1_i386.deb 2d8fb0696d96c49c3daf25ba35e5306a60ff87864c03b8c99b407b6ac21cab0c 2186 apache2-mpm-worker_2.2.19-1_i386.deb 430682b5a082ed370414e30b274df9a66a0a6d34442d56a2b1813ac84e6fbe7e 2280 apache2-mpm-prefork_2.2.19-1_i386.deb 02c853322bea2ee96f34493be720c97c9e2b45d6c3ede4187389b847f01798dd 2252 apache2-mpm-event_2.2.19-1_i386.deb ad9f0cc80e03954e2420aa21af8c91752c612b46dcad74c384ba81eb1bc85335 2284 apache2-mpm-itk_2.2.19-1_i386.deb 113b537b2ad28534ad4522a677526250accca2612c73d9f0fc172b5745c32318 167870 apache2-utils_2.2.19-1_i386.deb c7a1aebb4502fd847f527429f8afaf159f46e5693305a15829fd1cdbb306f039 102016 apache2-suexec_2.2.19-1_i386.deb b893d9a8783d51c4b2e83ad8d9ff94e3030d5d9d3b251a28d1f5eab385f1dd18 103632 apache2-suexec-custom_2.2.19-1_i386.deb 98cb6696bbe3f8919eedd7c9f217871163bf3f50ef103b6f0935b8c5e12315fe 1384 apache2_2.2.19-1_i386.deb c027c57c37c025bf56c9eac4c7bd7d7d667fdf83f23e42f0dd89abc9137056c2 137740 apache2-prefork-dev_2.2.19-1_i386.deb a67c1dacb21d8827cbb87611a17d9b27edcb152923e04f8c92dd0643031303f8 138926 apache2-threaded-dev_2.2.19-1_i386.deb e28897e4a283ff4a42fecb6f495299273a67a7f5360b8c39596f1100918ee760 2797994 apache2-dbg_2.2.19-1_i386.deb Files: c6886b702d2c601cf846bb6428fc86aa 1783 httpd optional apache2_2.2.19-1.dsc e9f5453e1e4d7aeb0e7ec7184c6784b5 7113418 httpd optional apache2_2.2.19.orig.tar.gz 3dfbf96710db0aa83cce5f117d7dc627 206517 httpd optional apache2_2.2.19-1.diff.gz cb59ef751704639920efef169e8ff25d 2660834 doc optional apache2-doc_2.2.19-1_all.deb 83a2b25c809698aa3cd0e8704e26c4cf 312640 httpd optional apache2.2-common_2.2.19-1_i386.deb 4fc9915c2846359ff89772d45ea18452 1449086 httpd optional apache2.2-bin_2.2.19-1_i386.deb f9be1b4913d50997cd3f7660fcca7bfb 2186 httpd optional apache2-mpm-worker_2.2.19-1_i386.deb 7921db857dc8fe4c9d66d9fc17406bf7 2280 httpd optional apache2-mpm-prefork_2.2.19-1_i386.deb 7bc9e9685cd5614178a364adbe7982ed 2252 httpd optional apache2-mpm-event_2.2.19-1_i386.deb b54813e5eee8520f2b26cdc3b55ba9d1 2284 httpd extra apache2-mpm-itk_2.2.19-1_i386.deb 7a1d788642c9da032275b08f4c861160 167870 httpd optional apache2-utils_2.2.19-1_i386.deb 8f62bfe3c13d0da43335f28657d0e856 102016 httpd optional apache2-suexec_2.2.19-1_i386.deb 4e1a1a2f9b018fb8d9d295ad939d74f9 103632 httpd extra apache2-suexec-custom_2.2.19-1_i386.deb 00bb14818d8bcdfea8c53c553de75ce7 1384 httpd optional apache2_2.2.19-1_i386.deb 24ae31f25d60815a84f077b755ea3c49 137740 httpd extra apache2-prefork-dev_2.2.19-1_i386.deb ffc9311acb1fc8e6e6722477f20e01b0 138926 httpd extra apache2-threaded-dev_2.2.19-1_i386.deb 2779d0948fb2a53ba2ca4006bb2f3592 2797994 debug extra apache2-dbg_2.2.19-1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iD8DBQFN2MsJbxelr8HyTqQRAiwpAJ9KPv5apCEyCFDrHCDzWd/OXcs1KQCfYvzi Dwrbqo1OYY+NAOojQDZuDg4= =5Qld -----END PGP SIGNATURE-----
--- End Message ---