[Pkg-sql-ledger-commit] r176 - in trunk/debian: . patches
pkg-sql-ledger-commit-owner at lists.alioth.debian.org
pkg-sql-ledger-commit-owner at lists.alioth.debian.org
Wed May 21 22:47:05 UTC 2008
Author: hertzog
Date: 2008-05-21 22:47:04 +0000 (Wed, 21 May 2008)
New Revision: 176
Modified:
trunk/debian/NEWS
trunk/debian/README.Debian
trunk/debian/changelog
trunk/debian/compat
trunk/debian/control
trunk/debian/copyright
trunk/debian/patches/10makefiles.dpatch
trunk/debian/postinst
Log:
* New upstream release.
* Close a few security issues. Closes: #418724
* Add Homepage field.
* Replaced dependency on apache by apache2. Closes: #482158
* Also replace tetex-extra Suggests by texlive-latex-extra | tetex-extra.
* Added Vcs-Svn, Vcs-Browser control fields.
* Switched to debhelper v5 mode.
* Drop configuration in postinst add a NEWS entry about initial
configuration.
* Updated 10makefiles.dpatch to match new upstream version
(hopefully).
* Converted copyright file to UTF-8.
* Upgraded Standards-Version to 3.7.3 (no change).
Modified: trunk/debian/NEWS
===================================================================
--- trunk/debian/NEWS 2008-04-08 19:40:02 UTC (rev 175)
+++ trunk/debian/NEWS 2008-05-21 22:47:04 UTC (rev 176)
@@ -1,3 +1,13 @@
+sql-ledger (2.6.28-1) unstable; urgency=low
+
+ The package doesn't do any web-server configuration any more. If you want
+ to activate SQL-Ledger, just add a line
+ "Include /etc/sql-ledger/sql-ledger-httpd.conf" in your Apache2
+ configuration (probably somewhere in a virtual host in
+ /etc/apache2/sites-enabled/).
+
+ -- Raphael Hertzog <hertzog at debian.org> Wed, 21 May 2008 23:37:43 +0200
+
sql-ledger (2.6.22-2) unstable; urgency=low
SQL-Ledger is not safe to use in public installations or in installations
Modified: trunk/debian/README.Debian
===================================================================
--- trunk/debian/README.Debian 2008-04-08 19:40:02 UTC (rev 175)
+++ trunk/debian/README.Debian 2008-05-21 22:47:04 UTC (rev 176)
@@ -23,12 +23,10 @@
CONFIGURATION INFORMATION
-------------------------
-To test this package you need to add this line to you
-/etc/apache/httpd.conf:
+To test this package you need to add this line to your
+apache configuration, either in a virtual host configuration, or in the
+global configuration (for example in /etc/apache2/conf.d/sql-ledger.conf):
include /etc/sql-ledger/sql-ledger-httpd.conf
-or, if you run apache >= 1.3.29.0.1, please a symlink from
-/etc/sql-ledger/sql-ledger-httpd.conf to /etc/apache/conf.d
-then restart apache.
You also have to add some users to your postgres DB
@@ -37,7 +35,7 @@
will be able to authenticate to your DB.
To make a more robust security scheme, please read your postgres
-documentation, but for now, do , as root, a
+documentation, but for now, do, as root, a
su - postgres
createuser -d www-data
Modified: trunk/debian/changelog
===================================================================
--- trunk/debian/changelog 2008-04-08 19:40:02 UTC (rev 175)
+++ trunk/debian/changelog 2008-05-21 22:47:04 UTC (rev 176)
@@ -1,3 +1,21 @@
+sql-ledger (2.8.14-1) unstable; urgency=low
+
+ * New upstream release.
+ * Close a few security issues. Closes: #418724
+ * Add Homepage field.
+ * Replaced dependency on apache by apache2. Closes: #482158
+ * Also replace tetex-extra Suggests by texlive-latex-extra | tetex-extra.
+ * Added Vcs-Svn, Vcs-Browser control fields.
+ * Switched to debhelper v5 mode.
+ * Drop configuration in postinst add a NEWS entry about initial
+ configuration.
+ * Updated 10makefiles.dpatch to match new upstream version
+ (hopefully).
+ * Converted copyright file to UTF-8.
+ * Upgraded Standards-Version to 3.7.3 (no change).
+
+ -- Raphael Hertzog <hertzog at debian.org> Wed, 21 May 2008 23:07:35 +0200
+
sql-ledger (2.6.22-2) unstable; urgency=high
* Document the security problem of SQL-Ledger in the README.Debian file
Modified: trunk/debian/compat
===================================================================
--- trunk/debian/compat 2008-04-08 19:40:02 UTC (rev 175)
+++ trunk/debian/compat 2008-05-21 22:47:04 UTC (rev 176)
@@ -1 +1 @@
-4
+5
Modified: trunk/debian/control
===================================================================
--- trunk/debian/control 2008-04-08 19:40:02 UTC (rev 175)
+++ trunk/debian/control 2008-05-21 22:47:04 UTC (rev 176)
@@ -3,13 +3,16 @@
Priority: optional
Maintainer: Finn-Arne Johansen <faj at bzz.no>
Uploaders: Petter Reinholdtsen <pere at debian.org>, Raphael Hertzog <hertzog at debian.org>, Gerardo Reynoso <greynoso at tindes.com>
-Build-Depends: debhelper (>= 4), dpatch
-Standards-Version: 3.7.2
+Build-Depends: debhelper (>= 5), dpatch
+Homepage: http://www.sql-ledger.com
+Vcs-Svn: svn://svn.debian.org/pkg-sql-ledger/trunk
+Vcs-Browser: http://svn.debian.org/wsvn/pkg-sql-ledger/trunk/?op=log
+Standards-Version: 3.7.3
Package: sql-ledger
Architecture: all
-Depends: ${perl:Depends}, apache | httpd, libdbd-pg-perl
-Suggests: tetex-extra, postgresql
+Depends: ${perl:Depends}, apache2 | httpd, libdbd-pg-perl
+Suggests: texlive-latex-extra |Â tetex-extra, postgresql
Description: A web based double-entry accounting program
Accounting data is stored in an SQL Server, for the display any text or
GUI browser can be used. The entire system is linked through a chart
@@ -29,3 +32,7 @@
in html and tex format. The tex templates are processed with latex
to produce postscript and PDF documents and can be sent to a printer,
displayed in a PDF viewer or sent out via email ...
+ .
+ NOTE: This package does not benefit from serious security support
+ and you should use it only in a trusted environment. It's known
+ to be affected by multiple SQL injections and similar problems.
Modified: trunk/debian/copyright
===================================================================
--- trunk/debian/copyright 2008-04-08 19:40:02 UTC (rev 175)
+++ trunk/debian/copyright 2008-05-21 22:47:04 UTC (rev 176)
@@ -3,8 +3,10 @@
It was downloaded from http://prdownloads.sourceforge.net/sql-ledger/sql-ledger-2.0.6.tar.gz?download
-Upstream Author: Dieter Simader dsimader at sql-ledger.org
+Upstream Author: Dieter Simader <dsimader at sql-ledger.org>
+ Copyright (c) 1999 - 2007, DWS Systems Inc.
+
Brazilian texts:
Author: Andre Felipe Machado <andremachado at techforce.com.br>
Miguel Koren O'Brien de Lacy <miguelk at konsultex.com.br>
@@ -13,7 +15,7 @@
Spanish texts:
Adoption to Colombian Accounting Terms:
Authors: Dirk Enrique Seiffert <info at caribenet.com>
- Lourdes Mejía Martinez <lourdes at caribenet.com>
+ Lourdes MejÃa Martinez <lourdes at caribenet.com>
Silfredo Godoy Chavez <silfredo at caribenet.com>
Catalan Translation:
@@ -24,7 +26,7 @@
Author: Thomas Bayen <tbayen at bayen.de>
Gunter Ohrner <G.Ohrner at post.rwth-aachen.de>
Danish texts:
- Author: Keld Jørn Simonsen <keld at dkuug.dk>
+ Author: Keld Jørn Simonsen <keld at dkuug.dk>
Jonas Smedegaard <jonas at jones.dk>
Estonian texts:
Author: Martin Lillepuu <martin at lillepuu.com>
@@ -44,22 +46,22 @@
Author: Maria Gabriela Fong <mgfong at maga.tzo.org>
John Stoddart <jstypo at imagencolor.com.ve>
Federico Montesino Pouzols <fedemp at arrok.com>
- Tomás Pereira <topec at percar.com>
+ Tomás Pereira <topec at percar.com>
Spanish texts:
Author: Maria Gabriela Fong <mgfong at maga.tzo.org>
John Stoddart <jstypo at imagencolor.com.ve>
Federico Montesino Pouzols <fedemp at arrok.com>
- Tomás Pereira <topec at percar.com>
+ Tomás Pereira <topec at percar.com>
Finish texts:
- Author: Petri Leppänen <mpj at mail.htk.fi>
+ Author: Petri Leppänen <mpj at mail.htk.fi>
French texts:
- Author: Sèbastien Brassard <sbrassar.cgocable.ca>
+ Author: Sèbastien Brassard <sbrassar.cgocable.ca>
Oscar Buijten <oscar at elbie.com>
Wolfgang Sourdeau <wolfgang at contre.com>
Aguibou KONE <aguibou.kone at rocketmail.com>
Jens-Ingo Brodesser <jens-ingo at all2all.org>
Hungarian texts:
- Author: Kabai József <kabai at investor.hu>
+ Author: Kabai József <kabai at investor.hu>
Icelandic texts:
Author: Margeir Reynisson <margeir at met.is>
Italian texts:
@@ -79,7 +81,7 @@
Bert Tijhuis <domino at dse.nl>
Paul Tammes <ptammes at home.nl>
Norwegian texts:
- Author: Keld Jørn Simonsen <keld at dkuug.dk>
+ Author: Keld Jørn Simonsen <keld at dkuug.dk>
Morten Pedersen <morten at workzone.no>
Finn-Arne Johansen <faj at bzz.no>
Petter Reinholdtsen <pere at hungry.com>
@@ -95,7 +97,7 @@
Author: Jonny Larsson <jonny at lernbo.com>
Daniel Andersson <daniel at addelei.nu>
Spanish texts:
- Author: Carlos López Linares <chlopezl at yahoo.com>
+ Author: Carlos López Linares <chlopezl at yahoo.com>
Turkish texts:
Author: Mufit Eribol <meribol at deltagrup.com.tr>
Traditional Chinese texts:
Modified: trunk/debian/patches/10makefiles.dpatch
===================================================================
--- trunk/debian/patches/10makefiles.dpatch 2008-04-08 19:40:02 UTC (rev 175)
+++ trunk/debian/patches/10makefiles.dpatch 2008-05-21 22:47:04 UTC (rev 176)
@@ -27,8 +27,8 @@
@@ -0,0 +1,18 @@
+PACKAGE = sql-ledger
+
-+# Assumption: only the menu.pl differs between each directory
-+MODULES = $(shell find mozilla/ -name '*.pl' | sed -e 's|mozilla/||' | grep -v menu.pl)
++# Assumption: only the menu/login/admin.pl differs between each directory
++MODULES = $(shell find mozilla/ -name '*.pl' | sed -e 's|mozilla/||' | grep -v menu.pl | grep -v login.pl | grep -v admin.pl)
+SUBDIRS = lynx mozilla
+
+all:
@@ -78,7 +78,7 @@
@@ -0,0 +1,14 @@
+PACKAGE = sql-ledger
+
-+FILES = *.html *.tex *.txt
++FILES = *.html *.tex *.txt *.eps *.png
+
+all:
+
@@ -193,7 +193,7 @@
+
+LIB_FILES = am.pl favicon.ico login.pl menu.ini setup.pl \
+ sql-ledger.conf.default VERSION index.html \
-+ sql-ledger.png sql-ledger.gif
++ images
+
+
+CFG_FILES = sql-ledger-httpd.conf sql-ledger.conf
@@ -202,7 +202,7 @@
+
+install:
+ mkdir -p $(DESTDIR)/usr/share/sql-ledger
-+ cp $(LIB_FILES) $(DESTDIR)/usr/share/sql-ledger
++ cp -a $(LIB_FILES) $(DESTDIR)/usr/share/sql-ledger/
+
+
+
Modified: trunk/debian/postinst
===================================================================
--- trunk/debian/postinst 2008-04-08 19:40:02 UTC (rev 175)
+++ trunk/debian/postinst 2008-05-21 22:47:04 UTC (rev 176)
@@ -12,29 +12,4 @@
echo "WARNING: Unable to replace /usr/lib/sql-ledger by a symlink"
fi
-#
-# Activate SQL-Ledger in apache configuration. Small helper script
-# to reduce the chance of typos.
-#
-# This should be rewritten to follow the info in
-# <URL:http://deb.riseup.net/mail/buffy/mail-clients/apache/> or
-# <URL:http://www.opal.dhs.org/involved/debian/apache/>, before it
-# is enabled.
-
-# Until it gets rewritten I simplify it because the current scheme
-# always reactivate sql-ledger for the default host (even if the admin
-# commented it out)
-
-if [ -d /etc/apache/conf.d ] ; then
- if [ ! -e /etc/apache/conf.d/sql-ledger.conf ]; then
- echo "INFO: A default /etc/apache/conf.d/sql-ledger-httpd.conf has been setup."
- cat <<END >/etc/apache/conf.d/sql-ledger.conf
-# Uncomment the following line to deactivate sql-ledger on the default
-# apache configuration. In that case you'll have to include this line of
-# configuration for each virtual host where you want to activate it
-Include /etc/sql-ledger/sql-ledger-httpd.conf
-END
- fi
-fi
-
#DEBHELPER#
More information about the Pkg-sql-ledger-commit
mailing list