Hi, Am Samstag, den 27.10.2012, 23:37 +0900 schrieb YOSHINO Yoshihito: > On Sat, Oct 27, 2012 at 11:31 PM, Joachim Breitner <nome...@debian.org> wrote: > > Am Samstag, den 27.10.2012, 22:36 +0900 schrieb YOSHINO Yoshihito: > >> Upstream has fixed the issue (tracked in > >> https://github.com/yesodweb/wai/issues/76) and released as warp 1.2.2 > >> (while this requires simple-sendfile >= 0.2.4, also needs to upgrade > >> warp-tls > >> to >= 1.2.1 for the updated dependency.) > > > > if 1.2.2 indeed contains the fix, then we have a fixed version of the > > library in experimental. > > Sorry for the lack of information. I would like to have this fix in wheezy.
I see. Can you elaborate on the severity of the problem? Do such request headers occur in common situations, or is it just a theoretical problem? It seems that we’d have to backport these two patches: https://github.com/yesodweb/wai/commit/a827f54ac31e2c928144bb8bb5b92ca1249013c5 https://github.com/yesodweb/wai/commit/dc4697c007beaf1846872744b83162e7c9406465 or am I missing something? Greetings, Joachim -- Joachim "nomeata" Breitner Debian Developer nome...@debian.org | ICQ# 74513189 | GPG-Keyid: 4743206C JID: nome...@joachim-breitner.de | http://people.debian.org/~nomeata
signature.asc
Description: This is a digitally signed message part
