[pkg-lighttpd] Bug#345554: marked as done (lighttpd: Cgi-bin executables in /usr/lib/cgi-bin/ are not accessible via http://localhost/cgi-bin/)

Debian Bug Tracking System owner at bugs.debian.org
Wed Jan 11 11:18:28 UTC 2006


Your message dated Wed, 11 Jan 2006 03:02:07 -0800
with message-id <E1Ewdjz-0000e0-Ty at spohr.debian.org>
and subject line Bug#345554: fixed in lighttpd 1.4.8-3
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 1 Jan 2006 18:47:01 +0000
>From borggraefe at web.de Sun Jan 01 10:47:01 2006
Return-path: <borggraefe at web.de>
Received: from smtp07.web.de ([217.72.192.225])
	by spohr.debian.org with esmtp (Exim 4.50)
	id 1Et8EP-0001GP-IT
	for submit at bugs.debian.org; Sun, 01 Jan 2006 10:47:01 -0800
Received: from [80.144.212.246] (helo=[192.168.1.115])
	by smtp07.web.de with esmtp (WEB.DE 4.105 #340)
	id 1Et8Dt-0008Hw-00; Sun, 01 Jan 2006 19:46:30 +0100
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Stefan Borggraefe <borggraefe at web.de>
To: Debian Bug Tracking System <submit at bugs.debian.org>
Subject: lighttpd: Cgi-bin executables in /usr/lib/cgi-bin/ are not accessible via
 http://localhost/cgi-bin/
Message-ID: <20060101184628.16128.93360.reportbug at rattle>
X-Mailer: reportbug 3.18
Date: Sun, 01 Jan 2006 19:46:28 +0100
Sender: borggraefe at web.de
X-Sender: borggraefe at web.de
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: lighttpd
Version: 1.4.8-2
Severity: important
Tags: patch


According to the Debian Policy Manual section 11.5...

"Cgi-bin executable files are installed in the directory 
     /usr/lib/cgi-bin/cgi-bin-name

 and should be referred to as 
     http://localhost/cgi-bin/cgi-bin-name"

The latter does not work when you installed lighttpd.

The following two lines added to lighttpd.conf did the trick for me:

$HTTP["url"] =~ "/cgi-bin/" { cgi.assign = ( "" => "" ) }
alias.url = ( "/cgi-bin/" => "/usr/lib/cgi-bin/" )

Of course the cgi and alias modules need to be enabled, too.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (9, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.14-2-k7
Locale: LANG=de_DE at euro, LC_CTYPE=de_DE at euro (charmap=ISO-8859-15)

Versions of packages lighttpd depends on:
ii  libbz2-1.0                    1.0.2-11   high-quality block-sorting file co
ii  libc6                         2.3.5-9    GNU C Library: Shared libraries an
ii  libldap2                      2.1.30-12  OpenLDAP libraries
ii  libpcre3                      6.4-1.1    Perl 5 Compatible Regular Expressi
ii  libssl0.9.8                   0.9.8a-5   SSL shared libraries
ii  lsb-base                      3.0-13     Linux Standard Base 3.0 init scrip
ii  mime-support                  3.35-1     MIME files 'mime.types' & 'mailcap
ii  zlib1g                        1:1.2.3-9  compression library - runtime

Versions of packages lighttpd recommends:
pn  php4-cgi                      <none>     (no description available)
ii  php5-cgi                      5.0.5-3    server-side, HTML-embedded scripti

-- no debconf information

---------------------------------------
Received: (at 345554-close) by bugs.debian.org; 11 Jan 2006 11:10:58 +0000
>From katie at ftp-master.debian.org Wed Jan 11 03:10:58 2006
Return-path: <katie at ftp-master.debian.org>
Received: from katie by spohr.debian.org with local (Exim 4.50)
	id 1Ewdjz-0000e0-Ty; Wed, 11 Jan 2006 03:02:07 -0800
From: Krzysztof Krzyzaniak (eloy) <eloy at debian.org>
To: 345554-close at bugs.debian.org
X-Katie: $Revision: 1.65 $
Subject: Bug#345554: fixed in lighttpd 1.4.8-3
Message-Id: <E1Ewdjz-0000e0-Ty at spohr.debian.org>
Sender: Archive Administrator <katie at ftp-master.debian.org>
Date: Wed, 11 Jan 2006 03:02:07 -0800
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-CrossAssassin-Score: 2

Source: lighttpd
Source-Version: 1.4.8-3

We believe that the bug you reported is fixed in the latest version of
lighttpd, which is due to be installed in the Debian FTP archive:

lighttpd-doc_1.4.8-3_all.deb
  to pool/main/l/lighttpd/lighttpd-doc_1.4.8-3_all.deb
lighttpd-mod-mysql-vhost_1.4.8-3_i386.deb
  to pool/main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.8-3_i386.deb
lighttpd_1.4.8-3.diff.gz
  to pool/main/l/lighttpd/lighttpd_1.4.8-3.diff.gz
lighttpd_1.4.8-3.dsc
  to pool/main/l/lighttpd/lighttpd_1.4.8-3.dsc
lighttpd_1.4.8-3_i386.deb
  to pool/main/l/lighttpd/lighttpd_1.4.8-3_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 345554 at bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Krzysztof Krzyzaniak (eloy) <eloy at debian.org> (supplier of updated lighttpd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster at debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon,  9 Jan 2006 13:49:34 +0100
Source: lighttpd
Binary: lighttpd-mod-mysql-vhost lighttpd-doc lighttpd
Architecture: source i386 all
Version: 1.4.8-3
Distribution: unstable
Urgency: low
Maintainer: Debian lighttpd maintainers <pkg-lighttpd-maintainers at lists.alioth.debian.org>
Changed-By: Krzysztof Krzyzaniak (eloy) <eloy at debian.org>
Description: 
 lighttpd   - A fast webserver with minimal memory footprint
 lighttpd-doc - Documentation for lighttpd
 lighttpd-mod-mysql-vhost - MySQL-based virtual host configuration for lighttpd
Closes: 344959 345554
Changes: 
 lighttpd (1.4.8-3) unstable; urgency=low
 .
   * New configuration layout (closes: #345554) (closes: #344959),
     read /etc/lighttpd/conf-available/README
     - conf-available directory for all templates
     - conf-enabled directory for enabled modules
Files: 
 eb393c9079265b994cec447e203ad7d3 867 web optional lighttpd_1.4.8-3.dsc
 a8dc22ffd168e9b3be31c518bafb01e7 8751 web optional lighttpd_1.4.8-3.diff.gz
 24b8e618c1970c5554e165f401bcd6f0 85962 doc optional lighttpd-doc_1.4.8-3_all.deb
 fde0f43b95367ec4028bf57933024419 275102 web optional lighttpd_1.4.8-3_i386.deb
 d23d16aee8211a444a8c976a1d111ee8 54786 web optional lighttpd-mod-mysql-vhost_1.4.8-3_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDxOL4+NMfSd6w7DERAlBoAKCQrB5kTl2VvI00RMGsGxbKUaz/LwCfbgh8
S3dhBJ/yPWq7KgATpoKcuU8=
=hKOa
-----END PGP SIGNATURE-----




More information about the pkg-lighttpd-maintainers mailing list