[Pkg-haskell-maintainers] Bug#691600: Bug#691600: libghc-warp-dev: does not parse request headers correctly

[Joachim Breitner]

Hi,

Am Samstag, den 27.10.2012, 23:37 +0900 schrieb YOSHINO Yoshihito:
> On Sat, Oct 27, 2012 at 11:31 PM, Joachim Breitner <nomeata at debian.org> wrote:
> > Am Samstag, den 27.10.2012, 22:36 +0900 schrieb YOSHINO Yoshihito:
> >> Upstream has fixed the issue (tracked in
> >> https://github.com/yesodweb/wai/issues/76) and released as warp 1.2.2
> >> (while this requires simple-sendfile >= 0.2.4, also needs to upgrade warp-tls
> >> to >= 1.2.1 for the updated dependency.)
> >
> > if 1.2.2 indeed contains the fix, then we have a fixed version of the
> > library in experimental.
> 
> Sorry for the lack of information. I would like to have this fix in wheezy.

I see. Can you elaborate on the severity of the problem? Do such request
headers occur in common situations, or is it just a theoretical problem?

It seems that we’d have to backport these two patches:
https://github.com/yesodweb/wai/commit/a827f54ac31e2c928144bb8bb5b92ca1249013c5
https://github.com/yesodweb/wai/commit/dc4697c007beaf1846872744b83162e7c9406465
or am I missing something?

Greetings,
Joachim

-- 
Joachim "nomeata" Breitner
Debian Developer
  nomeata at debian.org | ICQ# 74513189 | GPG-Keyid: 4743206C
  JID: nomeata at joachim-breitner.de | http://people.debian.org/~nomeata
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-haskell-maintainers/attachments/20121027/65e816de/attachment.pgp>