30080 - ht://Dig security hole; upgrade to 3.1.5 needed

Status: RESOLVED FIXED

(mozilla.org Graveyard :: Server Operations, task, P3)

Description

[Dan Mosedale (:dmosedale, :dmose)]

A security hole exists in the version of ht://Dig search script that we're
running.  A new version has been released.  See the URL above.

Comment 1

[Risto Kotalampi]

Just coinsidence... I've been playing with htdig 3.1.5 in my own website lately. 
Shouldn't be a problem... just need some time.

Comment 2

[Risto Kotalampi]

New binary pushed to /opt/tools but needs configs.

Comment 3

[Risto Kotalampi]

Done. Upgraded to htdig 3.1.5. 

Just for future reference if anyone will need to upgrade this again. 

Changes to "off-the-tar" distribution:


Configure:

./configure 
--prefix=/opt/tools/files/htdig-3.1.5 
--with-search-dir=/opt/tools/fis/htdig-3.1.5/search 
--with-cgi-bin-dir=/opt/tools/files/htdig-3.1.5/cgi-bin 
--with-image-dir=/opt/tools/files/htdig-3.1.5/htdig-images

Also, in CONFIG.in (to make URL space identical to old config):
IMAGE_URL_PREFIX=        /htdig-images

Then copied stuff to common/ (like footer.html, header.html) from old 
installation.

Also, copied old htdig.conf as /opt/tools/files/htdig-3.1.5/conf/htdig.conf.
All changes done in original repository in /share/systems/mozilla/tools/.