Back to work on Debian now. Released an updated security advisory, which seemed to work out OK despite the archive changes.
Some of my packages have new maintainers. The rest I will go through and upload with the maintainer set to QA tomorrow.
Some coding issues to resolve in the next day or two:
This apache module is utterly broken with regard to POST data. How I managed to use it in production for so long and not notice is beyond me.
Short version: The module intercepts incoming HTTP requests and filters them according to a set of user-defined rules. It allows you to block incoming requests with particular CGI parameters (get vs. post). However once the module has read the POST data it is destroyed - and unavailable for use by the CGI itself.
Apparently I must use the Apache API to use buckets/brigades to read only a copy of the submitted data, so that when the module is finished processing the data is still available.
I can find no understandable code for doing this. But I'm trying.
I need to rework some of the error detection so that roll-back will work when installation fails.
I need to find time to write more articles for the debian-administration site, but I think that will be difficult for the next week or two. I feel like I need a holiday…. despite just having had one. I guess that is because of the aftermath, but still .. ugh.
No tags No comments