Re: inactivity, and orphaned packages

2002-01-09 Thread Joerg Wendland
Hi, Leon Breedt, on 2002-01-09, 12:42, you wrote: > On Wed, Jan 09, 2002 at 02:16:19AM -0800, David D.W. Dowey wrote: > > I'm willing to take the libpam-pgsql if you are willing to assign it to me. > Go for it. If you want to take ownership of the code, I'd be very happy > as well :) I am the aut

Re: inactivity, and orphaned packages

2002-01-09 Thread Martin Michlmayr
* David D.W. Dowey <[EMAIL PROTECTED]> [20020109 02:17]: > I'm willing to take this package if you are willing to assign it to me. Please retitle the appropriate bug then (#128400 in the case of libpam-pgsql). Bug#128400: O: libpam-pgsql Bug#128399: O: ucl (libucl and libucl-dev) -- Martin Mich

Re: inactivity, and orphaned packages

2002-01-09 Thread Leon Breedt
On Wed, Jan 09, 2002 at 04:01:14AM -0800, David D.W. Dowey wrote: > Actually the more I look at this, the more I think it would be better to log > an entry about unescaped chars to the system log and deny the query. At > least until the patch > (http://cert.uni-stuttgart.de/doc/postgresql/escape/po

Re: inactivity, and orphaned packages

2002-01-09 Thread David D.W. Dowey
check. Any thoughts? - Original Message - From: David D.W. Dowey <[EMAIL PROTECTED]> To: Leon Breedt <[EMAIL PROTECTED]> Cc: Sent: Wednesday, January 09, 2002 3:14 AM Subject: Re: inactivity, and orphaned packages > This problem looks to be in the libpq itself, not

Re: inactivity, and orphaned packages

2002-01-09 Thread David D.W. Dowey
This problem looks to be in the libpq itself, not the pam library module itself. I could probably extend the module to include the escape check itself. Shouldn't hurt any queries adding that check before making submissions, whether this patch has been added or not. Simple check for formatting sho

Re: inactivity, and orphaned packages

2002-01-09 Thread Leon Breedt
On Wed, Jan 09, 2002 at 02:16:19AM -0800, David D.W. Dowey wrote: > I'm willing to take the libpam-pgsql if you are willing to assign it to me. Go for it. If you want to take ownership of the code, I'd be very happy as well :) There is a security problem with the way it accesses the database, in t

Re: inactivity, and orphaned packages

2002-01-09 Thread David D.W. Dowey
I'm willing to take this package if you are willing to assign it to me. I've got enough time free to take care of it. - Original Message - From: Leon Breedt <[EMAIL PROTECTED]> To: Sent: Wednesday, January 09, 2002 12:00 AM Subject: inactivity, and orphaned packages > Hi, > > I don't