Bug#442375: libapr1-dev: update --includedir path, apr-1 not apr-1.0
severity 442375 wishlist thanks On Saturday 15 September 2007, [EMAIL PROTECTED] wrote: The header files are installed into /usr/include/apr-1.0 but as the version is 1.2.7 I think it is just a hangover from a previous version of apr as the package conflicts with libapr1.0-dev which is an old version and I assume where that version came from. If the package source is installed outside of the debian package it is installed into /usr/include/apr1 which makes me further think it should be installed to /usr/include/apr1 and it better matches the current package name libapr1-dev. Shouldn't other projects use apr-1-config --includedir anyway, instead of hardcoding a path?
Bug#441845: marked as done (CVE-2007-3847: apache2 denial of service vulnerability (for threaded MPMs) in mod_proxy)
Your message dated Sun, 16 Sep 2007 21:33:38 +0200 with message-id [EMAIL PROTECTED] and subject line fixed in 2.2.6-1 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) ---BeginMessage--- Package: apache2 Severity: critical Justification: root security hole Tags: security *** Please type your report below this line *** A security hole has been disclosed on the Apache web site. http://httpd.apache.org/security/vulnerabilities_22.html Although it is disclosed as a denial of service, it seems to involve a buffer overflow, and thus allow remote code execution under the apache account. I can confim, from attacks in systems of a customer, that this is actually the case. As I have not seen any security upgrade from 4th of september, date of the disclosure, I request this issue to be fixed. Ramon Garcia Systems Administrator [EMAIL PROTECTED] http://www.kotasoft.com -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-5-vserver-686 Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8) ---End Message--- ---BeginMessage--- Version: 2.2.6-1 This was fixed in 2.2.6-1 ---End Message---
Processed: Re: Bug#442375: libapr1-dev: update --includedir path, apr-1 not apr-1.0
Processing commands for [EMAIL PROTECTED]: severity 442375 wishlist Bug#442375: libapr1-dev: update --includedir path, apr-1 not apr-1.0 Severity set to `wishlist' from `normal' thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed (with 1 errors): tagging 441845, user [EMAIL PROTECTED]
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.10.8 tags 441845 etch Bug#441845: CVE-2007-3847: apache2 denial of service vulnerability (for threaded MPMs) in mod_proxy Tags were: security Tags added: etch user [EMAIL PROTECTED] Selected user id ([EMAIL PROTECTED]) invalid, sorry End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#442375: libapr1-dev: update --includedir path, apr-1 not apr-1.0
On Sun, Sep 16, 2007 at 09:31:30PM +0200, Stefan Fritsch wrote: severity 442375 wishlist thanks On Saturday 15 September 2007, [EMAIL PROTECTED] wrote: The header files are installed into /usr/include/apr-1.0 but as the version is 1.2.7 I think it is just a hangover from a previous version of apr as the package conflicts with libapr1.0-dev which is an old version and I assume where that version came from. ?If the package source is installed outside of the debian package it is installed into /usr/include/apr1 which makes me further think it should be installed to /usr/include/apr1 and it better matches the current package name libapr1-dev. Shouldn't other projects use apr-1-config --includedir anyway, instead of hardcoding a path? It is code not under my control in the Second Life viewer (Linden Labs). I suggested to the second life mailing list to use, pkg-config --cflags apr-1 Flame Bait, but if you aren't supposed to use, #include apr1.0/apr.h or #include apr1/apr.h then why put the header files in /usr/include for the compiler to find? Not really looking for an answer, thanks for looking into the original bug. -- David Fries [EMAIL PROTECTED] http://fries.net/~david/ (PGP encryption key available) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#442794: libapr1: No developer documentation available for apr
Package: libapr1 Version: 1.2.7-8.2 Severity: important Hi, there's no libapr1-doc package available and the small html directory included in libapr1-dev doesn't contain any really useful information. It seems that the documentation is not built at all. Andreas -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (990, 'unstable'), (500, 'oldstable'), (500, 'experimental'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.22.1 Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages libapr1 depends on: ii libc6 2.6.1-4GNU C Library: Shared libraries ii libuuid1 1.40.2-1 universally unique id library libapr1 recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Processed: tagging 442794
Processing commands for [EMAIL PROTECTED]: # Automatically generated email from bts, devscripts version 2.10.8 tags 442794 pending Bug#442794: libapr1: No developer documentation available for apr There were no tags set. Tags added: pending End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#43910: Adeline
Heeey, baby… Hope you didn’t forget about our tour to Varadero… You don’t write me… Ok, I took out the pictures I told you about right here http://www.arabesque.ru/ (login:kisss, pass:catch) Hope you’ll love it… Write me as soon as you check it? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
