Your message dated Tue, 19 May 2020 19:33:11 +0000 with message-id <[email protected]> and subject line Bug#960392: fixed in lemonldap-ng 2.0.2+ds-7+deb10u4 has caused the Debian Bug report #960392, regarding liblemonldap-ng-portal-perl: Bad nginx configuration introduced by CVE-2019-19791 fix to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 960392: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960392 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: liblemonldap-ng-portal-perl Version: 2.0.2+ds-7+deb10u3 Severity: important Control: tags -1 + patch CVE-2019-19791 fix broke nginx configuration. This declaration is missing: --- a/_example/etc/portal-nginx.conf +++ b/_example/etc/portal-nginx.conf @@ -1,3 +1,8 @@ +# FastCGI backend definition +upstream llng_portal_upstream { + server unix:__FASTCGISOCKDIR__/llng-fastcgi.sock; +} + server { listen __PORT__; server_name auth.__DNSDOMAIN__;
--- End Message ---
--- Begin Message ---Source: lemonldap-ng Source-Version: 2.0.2+ds-7+deb10u4 Done: Xavier Guimard <[email protected]> We believe that the bug you reported is fixed in the latest version of lemonldap-ng, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Xavier Guimard <[email protected]> (supplier of updated lemonldap-ng package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 12 May 2020 10:59:43 +0200 Source: lemonldap-ng Architecture: source Version: 2.0.2+ds-7+deb10u4 Distribution: buster Urgency: medium Maintainer: Debian Perl Group <[email protected]> Changed-By: Xavier Guimard <[email protected]> Closes: 960392 Changes: lemonldap-ng (2.0.2+ds-7+deb10u4) buster; urgency=medium . * Fix nginx configuration regression introduced by CVE-2019-19791 fix (Closes: #960392) Checksums-Sha1: d0e144f112f38f8be85cbb5cf7be8db65257ea3d 3878 lemonldap-ng_2.0.2+ds-7+deb10u4.dsc 206f6cf6d459a7f1277134c354119c2f1d29a388 65796 lemonldap-ng_2.0.2+ds-7+deb10u4.debian.tar.xz Checksums-Sha256: c860d548c11c3944030e6702d8771d48c361b43a60f91695af9cd4b23ebc8f04 3878 lemonldap-ng_2.0.2+ds-7+deb10u4.dsc 6eac5040d3394f68244c87a37e0d3f76998aa284e8a666c6f34e1ad9c5b9daff 65796 lemonldap-ng_2.0.2+ds-7+deb10u4.debian.tar.xz Files: d7ee66bd0530a9aff318f257534e50f4 3878 perl optional lemonldap-ng_2.0.2+ds-7+deb10u4.dsc c7c8192a0dc2d8df55a713b852ad6591 65796 perl optional lemonldap-ng_2.0.2+ds-7+deb10u4.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAl6/j/IACgkQ9tdMp8mZ 7ukGgg//aKoqMhxdCmBDsG8PhWDSCGPaYdBykQNw8O8fx/gLnlcq49BMJlBV/MBD IAV2L9JQbaZpUDoMJrge9ggd50luFKF6w7PJkc7zI4XQLLQ8YoguNtcsAh14WqFS oYoAEjkbcJrIE/zbQXJ1Yoa/VACN3TZ/zTLBqTV+6ors3NfosnwgBqi4Po1XPpg4 13sjepnXYCgNiUHv+Qfjn/JPj6L1kw+URU4J1QT0kI68VlxXQ+S6jkmJT7bFTNa4 anh4B1p9Y9ERHq/PzdfT6bnMhCsaZRn0S149BxrhhLKCMhGlKwwNrgukPkNwiYD2 qHsuPbpLEmPuGSuvVV/XM49xPc2sjsUhp1v6UkvF74hIT+Ca0mwFVBlFMtenfl5n 7jjGEWE10lllzDrKqI1gelLFzwJjrM9J4FnVjKlFZmf327moI/Jw9lg0fY8UQGG1 6ntSXm2+kyHgghpKgqvthTqWIn/8hmfC1QxeFmmh/dZSuqXsmXr8Vaa6H4bTbeMl ETSPVBky4WIqyo3OKod+xpvnfoJcIgmhmLPxJ0RgCd+2G99pso3794VjEHHuosaa WUs3ZsjeVZP2jZWWZnt6yc+CsKQyCdXDRKL22h7eNUymXZ8uq6Z7sBLQ7xv0prll KuLOcdsraHoCNTMuS4OHObJ4dN/7IKloMWGDCkA7buOnhkFpuMg= =tDbk -----END PGP SIGNATURE-----
--- End Message ---
