Bug#960392: liblemonldap-ng-portal-perl: Bad nginx configuration introduced by CVE-2019-19791 fix

Xavier Guimard yadd at debian.org
Tue May 12 09:55:34 BST 2020


Package: liblemonldap-ng-portal-perl
Version: 2.0.2+ds-7+deb10u3
Severity: important
Control: tags -1 + patch

CVE-2019-19791 fix broke nginx configuration. This declaration is
missing:

--- a/_example/etc/portal-nginx.conf
+++ b/_example/etc/portal-nginx.conf
@@ -1,3 +1,8 @@
+# FastCGI backend definition
+upstream llng_portal_upstream {
+    server unix:__FASTCGISOCKDIR__/llng-fastcgi.sock;
+}
+
 server {
   listen __PORT__;
   server_name auth.__DNSDOMAIN__;



More information about the pkg-perl-maintainers mailing list