Accepted lurker 2.1-4 (source)
Ubuntu Installer
archive at ubuntu.com
Thu Apr 6 18:08:26 BST 2006
Accepted:
OK: lurker_2.1.orig.tar.gz
OK: lurker_2.1-4.dsc
-> Component: universe Section: mail
OK: lurker_2.1-4.diff.gz
Origin: Debian/unstable
Format: 1.7
Date: Thu, 06 Apr 2006 18:00:55 +0100
Source: lurker
Binary: lurker
Architecture: source
Version: 2.1-4
Distribution: dapper
Urgency: low
Maintainer: Jonas Meurer <mejo at debian.org>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description:
lurker - Archive tool for mailing lists with search engine
Closes: 347896 348643 356935 356978
Changes:
lurker (2.1-4) unstable; urgency=low
.
* postinst: strip the comma from a debconf multiselect item. Thanks to
Paul Wise <pabs3 at bonedaddy.net> (closes: #356978)
* postinst: don't give 'none' as an option for the lurker/apache_conf
debconf multiselect. this cleans up the code and fixes a false positive
when both apaches and 'none' are selected.
.
lurker (2.1-3) unstable; urgency=low
.
* add build-depends on dpatch, thanks to Bastian Blank <waldi at debian.org>
(closes: #356935)
.
lurker (2.1-2) unstable; urgency=low
.
* release 2.1-1 fixed the following security issues:
- Since the configuration file needs to be specified in the URL and
lines not understood are exposed in an error message lurker was
able to display all files that are readable for the www-data user
and group. (CVE-2006-1062)
- It is possible for a remote attacker to create or overwrite files
in any writable directory that is named "mbox". (CVE-2006-1063)
- Missing input sanitising allows an attacker to inject arbitrary
web script or HTML. (CVE-2006-1064)
* rename luker-index-mm to lurker-index-lc. drop support for automatical
list configuration for new lists. update documentation accordingly.
* completely rewrite mailman2lurker.pl, rename it to mailman2lurker.
install mailman2lurker into /usr/bin, provide a manpage.
* add a note about the delete button in README.Debian.
* add patches/01_umask.dpatch, which adds the possibility to configure the
umask for lurker-index and lurker-search in lurker.conf. it fixes also the
documentation to not suggest to invoke lurker-index via 'sg' any more.
.
lurker (2.1-1) unstable; urgency=low
.
* new upstream release, fixing some security issues
* run lurker-prune only in prerm, not in postrm. Thanks, Wesley
* run lurker-prune in postinst too. Thanks, Wesley
* rewrite mailman2lurker script
* minor improvements to README.mailman, still a major revision is needed
* add --build (and eventually even --host) to confflags for cross-compiling
* update README.procmail to use group lurker for running lurker-index
.
lurker (2.0-1) unstable; urgency=low
.
* new upstream release
- use default config file for all binaries, remove lurker-index wrapper
- lurker-prune doesn't support -d any more
- adjust apache.conf
- the webinterface now has a reply and a trash button
- multiple frontends are supported now
* adjusted the configure flags
- cgi scripts are now in /usr/lib/cgi-bin/lurker/
* removed old-mailman2lurker.sh
* updated 'database regeneration' debconf template and de.po
* don't remove conf.d/lurker for unconfigured apaches
* ran ispell against all files in debian, fixed many typos.
.
lurker (1.3-6) unstable; urgency=low
.
* fix permission of /var/www/lurker/mindex
* run lurker-prune as user www-data in prerm
* fix instructions about integration with mailman, thanks to
Mihai Maties <mihai at xcyb.org> (closes: #347896)
* run lurker-params only if available, fallback to sed otherwise.
Thanks to Laurent Bonnaud <bonnaud at lis.inpg.fr> (closes: #348643)
Files:
44e73a53e84e895a8a361ae27dcda6dd 285431 mail optional lurker_2.1.orig.tar.gz
368d6c19cdcacc7fb3cc1b7f19147169 600 mail optional lurker_2.1-4.dsc
08e489920fd4d84ba507d759114f97c8 29993 mail optional lurker_2.1-4.diff.gz
More information about the dapper-changes
mailing list