cgiwrap (3.9-3.1) unstable; urgency=high * Non-maintainer upload - Fixes security bugs Minimum UID now includes all system users (closes: #316881) CGIs can be used to disclose system information (closes: #316901) + Do not generate verbose messages which might be used to disclose valid usernames. + Do not install the debugging CGI invocations as they might provide sensitive server information. (compiled using --without-cgiwrapd) -- Neil McGovern Wed, 10 Aug 2005 02:29:26 +0100 cgiwrap (3.9-3) unstable; urgency=high * php-cgiwrap: Configure with /usr/bin/php4-cgi (closes: #311294 Thanks to Frank Louwers) * GNU config automated update: config.sub (20040312 to 20050422), config.guess (20040312 to 20050422) -- Pierre Machard Tue, 31 May 2005 10:58:10 +0200 cgiwrap (3.9-2) unstable; urgency=medium * Set urgency to medium since package include in sarge does not work with the default installation * Automaticaly update config.{sub,guess} * GNU config automated update: config.sub (20040105 to 20040312), config.guess (20040105 to 20040312) * Add cgiwrap.{allow,deny,userdir} as conffile * Add a prerm to ensure smooth transition * Fix manpages thanks to Paul Whittaker * Add examples for cgiwrap.{allow,deny,userdir} * Fix manpages location * Add NEWS.Debian -- Pierre Machard Wed, 28 Jul 2004 16:51:06 +0200 cgiwrap (3.9-1) unstable; urgency=low * New upstream release * Update Standards-Version -- Pierre Machard Wed, 26 May 2004 22:50:51 +0200 cgiwrap (3.8-3) unstable; urgency=high * Move cgi dir back into $HOME/public_html/cgi-bin, since it was broken users configuration. * Add a complete example of a per user setup thanks to Ian Charles : - include a directive that denies access to a user's cgi-bin directory. - Second example rewrites requests to cgi-bin through to cgiwrap. * Update Standards-Version. -- Pierre Machard Fri, 26 Sep 2003 12:04:22 +0200 cgiwrap (3.8-2) unstable; urgency=low * Fix binary-arch in debian/rules * Improve php-cgiwrap short description * Add a note in Readme.Debian to inform users that cgi dir is $HOME/cgi-bin -- Pierre Machard Sat, 16 Aug 2003 19:47:40 +0200 cgiwrap (3.8-1) unstable; urgency=low * Adopt the package (closes: #202172) * New upsteam release * Use dpkg-statoverride * Register documentation with doc-base * Remove empty directory examples (closes: #68660) * Split the package in two binary packages now you can use PHP (closes: #109366) * Use symlinks instead of hard links for aliases of cgiwrap * Set the user cgi-bin to $HOME/cgi-bin so that user's cgis are not directly accessible from the web (closes: #58327) * Policy version 3.6.0 * Accept NMUs. (closes: #119065, #106299, #70266, #83834) -- Pierre Machard Thu, 14 Aug 2003 02:33:24 +0200 cgiwrap (3.7.1-0.2) unstable; urgency=low * Non-maintainer upload. * Update config.guess and config.sub (closes: #119065). -- Colin Watson Thu, 15 Nov 2001 21:34:45 +0000 cgiwrap (3.7.1-0.1) unstable; urgency=low * Non-maintainer upload to fix security hole. * New upstream release. - HTML-encodes error messages appropriately, fixing cross-site scripting vulnerability (closes: #106299). * debian/control: Add build-dependencies (closes: #70266). * Remove call to obsolete dh_suidregister from debian/rules, and conflict with suidmanager (<< 0.50) instead for statoverrides (closes: #83834). * Don't install old /usr/man/man1 directory. * Policy version 3.1.1. -- Colin Watson Sat, 10 Nov 2001 01:58:50 +0000 cgiwrap (3.6.4-2) unstable; urgency=low * jwl@debian.org is adopting package from Karl Hegbloom -- Jim Lynch Sun, 9 Jan 2000 20:13:35 -0800 cgiwrap (3.6.4-1) unstable; urgency=low * repackaging from scratch; switching to debhelper (Was Initial Release.) -- Jim Lynch Wed, 3 Nov 1999 20:37:43 -0800 cgiwrap (3.6.3-1) frozen unstable; urgency=low * NMU to fix several upstream bugs (closes #31828) -- Ben Collins Sun, 24 Jan 1999 18:16:42 -0500 cgiwrap (3.5-3) unstable; urgency=low * Compile with libc6 * Changed postinst interpretter to /bin/bash -- Karl M. Hegbloom Tue, 9 Sep 1997 20:02:29 -0700 cgiwrap (3.5-2) unstable; urgency=low * Fixed man page symlinks. Since the man page is gzipped, the symlinks are named with .gz suffixes to match them. -- * Worked on the manual page a little bit; added names of all `cgiwrap`s aliases. -- -- Karl M. Hegbloom Sat, 7 Jun 1997 06:10:58 -0700 cgiwrap (3.5-1) unstable; urgency=low * Initial Release. -- Karl M. Hegbloom Mon, 19 May 1997 15:15:25 -0700