Package: dhelp Version: 0.6.16 Severity: important File: /etc/apache2/conf.d/dhelp.conf Tags: patch
Due to a recent change in libc6 (Debian/unstable), resolving "localhost" will most likely return "::1" as IP address instead of plain old "127.0.0.1". The default apache configuration provided by dhelp.conf relies on localhost being "127.*.*.*" to have URLs like http://localhost/doc/SOMETHING work for doc-base document retrieval and search. If "localhost" resolves to "::1", the user will get a "permission denied" error while executing one of /usr/lib/cgi-bin/{dhelp_fetcher,dsearch}. To fix this it is enough to change the apache configuration snippet so that it matches over "localhost" instead of matching over "127.*.*.*. Patch attached. -- System Information: Debian Release: squeeze/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 2.6.29-1-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages dhelp depends on: ii doc-base 0.9.1 utilities to manage online documen ii libcommandline-ruby1.8 0.7.10-10 Ruby library to write command-line ii libdata-page-perl 2.01-1 Help when paging through sets of r ii libdb-ruby1.8 0.6.5-3 Interface to Berkeley DB for Ruby ii libgettext-ruby1.8 1.93.0-1 Gettext for ruby1.8 ii libhtml-parser-perl 3.60-1 collection of modules that parse H ii liblocale-gettext-perl 1.05-4 Using libc functions for internati ii libtemplate-perl 2.20-1 template processing system written ii liburi-perl 1.37+dfsg-1 Manipulates and accesses URI strin ii perl-modules 5.10.0-19 Core Perl modules ii pstotext 1.9-4 Extract text from PostScript and P ii ruby1.8 1.8.7.72-3.1 Interpreter of object-oriented scr ii swish++ 6.1.5-2 Simple Document Indexing System fo ii xpdf-utils 3.02-1.4 Portable Document Format (PDF) sui Versions of packages dhelp recommends: ii epiphany-gecko [www-browser 2.24.3-2 Intuitive GNOME web browser - Geck ii galeon [www-browser] 2.0.6-2.1+b2 GNOME web browser for advanced use ii iceweasel [www-browser] 3.0.9-1 lightweight web browser based on M ii lynx-cur [www-browser] 2.8.7pre1-1 Text-mode WWW Browser with NLS sup ii w3m [www-browser] 0.5.2-2+b1 WWW browsable pager with excellent Versions of packages dhelp suggests: ii apache2-mpm-worker [httpd] 2.2.11-3 Apache HTTP Server - high speed th pn catdvi <none> (no description available) ii html2text 1.3.2a-13 advanced HTML to text converter ii info2www 1.2.2.9-24 Read info files with a WWW browser pn man2html <none> (no description available) ii w3m 0.5.2-2+b1 WWW browsable pager with excellent -- no debconf information
diff -Naur dhelp-0.6.16.orig/apache-dhelp.conf dhelp-0.6.16/apache-dhelp.conf --- dhelp-0.6.16.orig/apache-dhelp.conf 2009-04-28 18:34:24.168265535 +0200 +++ dhelp-0.6.16/apache-dhelp.conf 2009-04-28 18:34:36.196310611 +0200 @@ -1,13 +1,13 @@ <Location /cgi-bin/dsearch> order deny,allow deny from all - allow from 127.0.0.0/255.0.0.0 + allow from localhost Options Indexes FollowSymLinks MultiViews </Location> <Location /cgi-bin/dhelp_fetcher> order deny,allow deny from all - allow from 127.0.0.0/255.0.0.0 + allow from localhost Options Indexes FollowSymLinks MultiViews </Location>
