[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#837696: marked as done (lighttpd: CGI configuration doesn't define an alias for /cgi-bin/)

Your message dated Thu, 24 Jan 2019 21:35:46 +0000
with message-id <E1gmmf4-0004sG-IT@fasolo.debian.org>
and subject line Bug#837696: fixed in lighttpd 1.4.52-4
has caused the Debian Bug report #837696,
regarding lighttpd: CGI configuration doesn't define an alias for /cgi-bin/
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
837696: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837696
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: lighttpd
Version: 1.4.35-4+deb8u1
Severity: normal

Dear Maintainer,

In order to reproduce:

1. Install lighttpd
2. Run `lighty-enable-mod cgi`
3. Run `systemctl restart lighttpd`
4. Run `touch /usr/lib/cgi-bin/x`
5. Run `curl http://localhost/cgi-bin/x`

Actual outcome:

<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
         "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";>
<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en">
 <head>
  <title>404 - Not Found</title>
 </head>
 <body>
  <h1>404 - Not Found</h1>
 </body>
</html>

Expected outcome:

[empty output]

The root cause is, that 10-cgi.conf doesn't define an alias
for /cgi-bin/. Adding this line

alias.url       += ( "/cgi-bin/" => "/usr/lib/cgi-bin/" )

would fix this issue and the root cause of #763618 as well.

-- System Information:
Debian Release: 8.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=ru_RU.utf8, LC_CTYPE=ru_RU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages lighttpd depends on:
ii  init-system-helpers         1.22
ii  libattr1                    1:2.4.47-2
ii  libbz2-1.0                  1.0.6-7+b3
ii  libc6                       2.19-18+deb8u4
ii  libfam0                     2.7.0-17.1
ii  libldap-2.4-2               2.4.40+dfsg-1+deb8u2
ii  libpcre3                    2:8.35-3.3+deb8u4
ii  libssl1.0.0                 1.0.1t-1+deb8u2
ii  libterm-readline-perl-perl  1.0303-1
ii  lsb-base                    4.1+Debian13+nmu1
ii  mime-support                3.58
ii  perl                        5.20.2-3+deb8u6
ii  systemd                     215-17+deb8u4
ii  zlib1g                      1:1.2.8.dfsg-2+b1

Versions of packages lighttpd recommends:
ii  spawn-fcgi  1.6.4-1

Versions of packages lighttpd suggests:
ii  apache2-utils  2.4.10-10+deb8u5
ii  openssl        1.0.1t-1+deb8u2
pn  rrdtool        <none>

-- no debconf information

Attachment: signature.asc
Description: This is a digitally signed message part


--- End Message ---
--- Begin Message --- 
Source: lighttpd
Source-Version: 1.4.52-4

We believe that the bug you reported is fixed in the latest version of
lighttpd, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 837696@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Helmut Grohne <helmut.grohne@intenta.de> (supplier of updated lighttpd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 24 Jan 2019 21:39:31 +0100
Source: lighttpd
Architecture: source
Version: 1.4.52-4
Distribution: sid
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Helmut Grohne <helmut.grohne@intenta.de>
Closes: 822920 837696
Changes:
 lighttpd (1.4.52-4) unstable; urgency=medium
 .
   * QA Upload.
 .
   [ Glenn Strauss ]
   * replace and deprecate include-conf-enabled.pl with include glob
   * provide conf-available/10-sockproxy.conf
   * explicitly add default modules to lighttpd.conf
   * load mod_compress after conf-enabled/*.conf (Closes: #822920)
 .
   [ Stefan Bühler ]
   * remove reference to lighttpd 2.0 in the description for lighttpd-mod-cml
   * run dh_missing --fail-missing as override in own target
   * adapt build dependencies for xenial (and jessie) backports
   * don't generate lighttpd:ModuleProvides substvar for current package name
   * reexport upstream gpg keys with minimal options
 .
   [ Glenn Strauss ]
   * strict parsing and normalization of URL (see NEWS)
   * lighttpd.init add configtest action
 .
   [ Stefan Bühler ]
   * build with libunwind to log backtraces on failed asserts
 .
   [ Helmut Grohne ]
   * fail the build when chown does not work
 .
   [ Glenn Strauss ]
   * define alias.url in 10-cgi.conf (Closes: #837696)
   * remove obsolete index.lighttpd.html
   * update paths in starter index.html
   * NEWS: mod_cgi defines alias to /usr/lib/cgi-bin
   * enable 99-unconfigured.conf if not configured
 .
   [ Helmut Grohne ]
   * connection_close.patch: cherry-picked from upstream
   * cross.patch: cherry-picked from upstream
Checksums-Sha1:
 6a4811f9612b897c99bd507e33d49cfb689ce455 3548 lighttpd_1.4.52-4.dsc
 88685ce5360f5c3af5cbddada35efb9c8500c9df 42684 lighttpd_1.4.52-4.debian.tar.xz
 3d4802edacbb5b7e8e188ef63198c4a5b9201d81 16047 lighttpd_1.4.52-4_amd64.buildinfo
Checksums-Sha256:
 45750b1a183386068890bb243b3383d1dc0d6cb0f4fdba06ecd888ab934b8100 3548 lighttpd_1.4.52-4.dsc
 93c7a408bee172d1e61f70ce6d2df6e2e031430024985e36309855893dfdf0bb 42684 lighttpd_1.4.52-4.debian.tar.xz
 81c5bd24dc0055f2dd1a7e1d4f9afbf99d8e6cef5903493e213ce05ea03c4957 16047 lighttpd_1.4.52-4_amd64.buildinfo
Files:
 ad28dd718011027e2f3a4f7d6291182b 3548 httpd optional lighttpd_1.4.52-4.dsc
 e140c960844c1226cb285151e2b57dcf 42684 httpd optional lighttpd_1.4.52-4.debian.tar.xz
 2e96e009cd46d552b9423f07af92968a 16047 httpd optional lighttpd_1.4.52-4_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEETMLS2QqNFlTb+HOqLRqqzyREREIFAlxKJacACgkQLRqqzyRE
REIbMQ/8D6R0HlVwcQQadrUVHsJPXxndPzMDdYBZnaWpPpUZPYSje8Q0xmiBOQK5
G9A3HD7+EVGIbwN1DQKoVFD+9r2iqHtTyH1J7/SVfhY+4QECQgpeyqnO5zlOxVGE
H29o/eIM2eIyhTGxVqBYqhT+DM9thd0/nASMctXfjmHewHyeuuv2odbBamcMzVdT
9xlUGPSFvcWjXzUAwKKP73P0fRJ9TjK95UeHEvTkHS56KQfahzKd7Sqg0uDdXPE8
ogqtlVXLD1QsdGVhENlBgG81drueO09b0qgaRQa4s858xF3eKS2FNbflaUKTS6vY
3RBDlvrxhEXGJduPjA0Y34Z6BUjjeSC2dhL3hF9BageLwslFvZ30f8j1iTA/fIqD
AgA1B38bwUNHodc+wB+ICXmOzrJ0lL8rQdBIcMFVzYGrpN5yXkkPl3u7qDGxGA+T
9ZY8LayCTcA1+rn2UwGgNeuSAjPQWQ5TjNePcq3hi4gRvgad7KBSVFxqsZhpE3OX
j2f7sl6VW1TPR8pc1CigfppS3eYrLcOROLvW+wAg/hGXUE8y+c4Ujl4fDay/ugSx
0UM8TnW+pa4Z+f5YdMDAU3uz7ODa7bAwMFF77ifZg/qGF4xIJiZ2kfh0nWSfrk3f
SgFE1/mdkEI/SF/RKNJt7uKmhlBQfOKSkylEOiBJe1TAJQqvyow=
=V2KY
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: