Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 544562

Summary: net-nds/gosa-core: gosa.include makes use of insecure AddHandler directive
Product: Gentoo Linux Reporter: Sebastian Pipping <sping>
Component: Current packagesAssignee: Tiziano Müller (RETIRED) <dev-zero>
Status: RESOLVED OBSOLETE    
Severity: normal Keywords: PMASKED
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: Pending removal: 2018-12-21
Package list:
Runtime testing required: ---
Bug Depends on:    
Bug Blocks: 544560    

Description Sebastian Pipping gentoo-dev 2015-03-26 15:43:45 UTC
# fgrep -R AddHandler .
./files/gosa.include:     AddHandler fcgid-script .php

# fgrep -R '${FILESDIR}/gosa.include' .
./gosa-core-2.6.10.ebuild:      doins "${FILESDIR}/gosa.include"
./gosa-core-2.6.11.ebuild:      doins "${FILESDIR}/gosa.include"
./gosa-core-2.6.12.ebuild:      doins "${FILESDIR}/gosa.include"

Please see bug #538822 for why that is a problem and for a proposed fixed.

Thank you!
Comment 1 Brian Evans (RETIRED) gentoo-dev 2019-01-23 18:12:26 UTC
Removed