[pkg-lighttpd] Bug#501354: Regression in FastCGI path handling in 1.4.13-4etch11 security upload

Chris Lamb lamby at debian.org
Sat Nov 15 12:52:11 UTC 2008


(Please ensure you CC the submitter next time; your response has been
sitting on the BTS for over a month now as I had not been notified there
was any update. :/)

Olaf wrote:

> > For example, visiting "/foo" would result in the application (NB. not 
> > the webserver) reporting a 404 at "/mytab.fcgi/foo".
> 
> What path do you expect the FastCGI app to get?

/foo, I think.

> > (Tagging as 'security' to alert the uploader, feel free to drop it.)
> 
> That's not how that tag is supposed to be used.

Right - I thought as much, hence being open about dropping it..


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org
       `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-lighttpd-maintainers/attachments/20081115/ec04930d/attachment.pgp 


More information about the pkg-lighttpd-maintainers mailing list