[leaf-devel] weblet (sh-httpd) bug
Looks like someone found another bug in sh-httpd: http://lists.netsys.com/pipermail/full-disclosure/2003-October/012776.html The first 2 chunks of the patch supplied look OK, although I have not personally tested them. The third (and last) chunk of the patch should probably be tweaked to the following (again, not actually tested): @@ -292,7 +292,7 @@ fi - DIR="`dname $URL`" + DIR="`dname \"$URL\"`" - FILE="`bname $URL`" + FILE="`bname \"$URL\"`" Note that this bug is not a serious security issue if you have not allowed external internet access to the weblet server (blocked by default in all LEAF varients, so you'd have to explicitly enable access). Bering team: This should probably get fixed (and tested) for the next update of Bering (I'm not planning on updating Dachstein). I can make the updates, if desired, but I'm not sure if the weblet package provided with Bering is the same I shipped with Dachstein, or if modifications have been made to the web content (seems likely) and/or sh-httpd server (ie: using the version patched for POST support). -- Charles Steinkuehler [EMAIL PROTECTED] --- This SF.net email is sponsored by: The SF.net Donation Program. Do you like what SourceForge.net is doing for the Open Source Community? Make a contribution, and help us add new features and functionality. Click here: http://sourceforge.net/donate/ ___ leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
[leaf-devel] [ leaf-Bugs-831036 ] [Bering uClibc 2.0RC2] shorewall fails, confused by IPv6
Bugs item #831036, was opened at 2003-10-27 15:40 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=113751&aid=831036&group_id=13751 Category: Release/Branch: Bering Group: None Status: Open Resolution: None Priority: 5 Submitted By: Hans Ulrich Niedermann (hun) Assigned to: Jacques Nilo (jnilo) Summary: [Bering uClibc 2.0RC2] shorewall fails, confused by IPv6 Initial Comment: Hi, when the kernel has IPv6 support enabled, starting up shorewall fails. When IPv6 is enabled (ipv6.o loaded), the ethernet interfaces automatically get an IPv6 address. This address is listed in the output of "ip addr show dev $ETHIF" with an "inet6" prefix, as opposed to the "inet" prefix for IPv4 addresses. Unfortunately, shorewall sometimes uses a simple "ip addr show dev $ETHIF | grep inet" to find an IPv4 address, which also matches the inet6 addresses. Replacing the "grep inet" with "grep 'inet '" (add quotes and space) fixes the problem. Patch attached. Gruß, Uli -- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=113751&aid=831036&group_id=13751 --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ ___ leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
