[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: updating sitesummary in stable+oldtable due to regression introduced with apache update (Re: Bug#856539: jessie-pu: package sitesummary/0.1.17+deb8u2)



[Sébastien Delafond]
> Sure, we can do that. Send us a debdiff and we can take it from there.

The debdiff for jessie is in bts already.  Here is the equivalent diff
for wheezy.  The code change is the same, only the changelog version is
different.

diff --git a/debian/changelog b/debian/changelog
index f8e2c48..f8df229 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+sitesummary (0.1.8+deb7u2) UNRELEASED; urgency=medium
+
+  [ Wolfgang Schweer ]
+  * Adjust sitesummary-upload to use CRLF (\r\n) line endings to be compliant
+    with apache 2.4.25 security fixes for HTTP requests. (Closes: #852623).
+
+ -- Wolfgang Schweer <wschweer@arcor.de>  Fri, 27 Jan 2017 15:49:50 +0100
+
 sitesummary (0.1.8+deb7u1) wheezy; urgency=low
 
   * No change upload targeted at wheezy-proposed-update for the upcoming 7.2
diff --git a/sitesummary-upload b/sitesummary-upload
index 050aefa..28c19d6 100755
--- a/sitesummary-upload
+++ b/sitesummary-upload
@@ -78,15 +78,13 @@ $form .= "$ORS";
 my $formlen = length($form);
 
 #Send data
-print $remote <<"EOF";
-POST $submiturl HTTP/1.1
-User-Agent: sitesummary-upload
-Host: $host
-content-type: multipart/form-data; boundary=$boundary
-content-length: $formlen
-
-$form
-EOF
+print $remote "POST $submiturl HTTP/1.1\r\n";
+print $remote "User-Agent: sitesummary-upload\r\n";
+print $remote "Host: $host\r\n";
+print $remote "Content-Type: multipart/form-data; boundary=$boundary\r\n";
+print $remote "Content-Length: $formlen\r\n";
+print $remote "\r\n";
+print $remote "$form";
 
 #Get answer
 my($answer)="";
-- 
Happy hacking
Petter Reinholdtsen


Reply to: