Anders Kaseorg

Show:

What's happening?

  • Comment: man: escape.apostrophe wrongly escapes quotation marks

    The Debian maintainer Daniel Leidert has added a patch to docbook-xsl 1.75.2+dfsg-3 that implements the same solution as Pod::Man. I have successfully tested a resulting manpage on both GNU and Solaris systems. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507673 Here’s the patch by itself. I believe it is now suitable for inclusion upstream...

    2009-11-04 18:00:23 UTC in DocBook

  • Comment: man: escape.apostrophe wrongly escapes quotation marks

    According to : “With groff, what you want is \(aq. Unfortunately, that's groff-specific and won't work with, for example, Solaris man. Pod::Man adds: .ie \n(.g .ds Aq \(aq .el .ds Aq ' to the preamble of the man page and then uses \*(Aq as the escape for apostrophes in the man page.” Is this a sufficiently portable...

    2009-07-09 18:55:29 UTC in DocBook

  • Apache-readable keytab is a security risk

    Since the Krb5Keytab must be readable by the Apache process, it is difficult or impossible to prevent it from being served to the web if there are untrusted user accounts on the system (e.g. shared hosting). To fix this, the keytab needs to be read as root before Apache drops privileges, like how mod_ssl reads the SSL private key.

    2008-10-11 04:05:54 UTC in Kerberos Module For Apache

  • Patch: CVE-2008-2232: privilege escalation

    afuse is vulnerable to a local privilege escalation because the expand_template function passes metacharacters from the pathname unescaped to the shell. This issue is tracked as CVE-2008-2232: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2232 I submitted a patch to the Debian security team, and they released fixed packages: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490921...

    2008-08-20 06:18:56 UTC in afuse

  • [patch] Makefile race condition can lead to build failure

    Makefile has underspecified dependencies on the generated $(EXPORTS) headers, leading to a race condition when building in parallel. This race is most easily triggered by adding "sleep 10" to the top of ubuntu/ndiswrapper/mkexport.sh and ubuntu/ndiswrapper/mkstubs.sh. See for an example of the errors or incorrect builds that could...

    2008-06-20 07:12:39 UTC in ndiswrapper

  • Broken links to databases with + in their name

    I have some databases with + in their name. If I click the Databases link from the phpMyAdmin main page, then click on one of these databases, I am redirected back to the main page instead of my database. It appears that the + is not getting properly encoded or decoded somewhere. This bug only happens with JavaScript enabled.

    2008-03-14 08:55:03 UTC in phpMyAdmin

  • (ok 3.0.1) ForceSSL generates incorrect redirections

    When ForceSSL is turned on, a URL like http://server/phpMyAdmin/ is redirected to https://server/phpMyAdmin/?collation_connection=utf8_unicode_ci&token=... This is incorrect: the URL should contain & and not &. The & encoding is only used for embedding the URL into an HTML document. It should never be treated as part of the URL itself. The & should be generated with...

    2008-03-14 05:07:10 UTC in phpMyAdmin

About Me


Send me a message