Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 358 of 808  Not logged in ELOG logo
New entries since:Thu Jan 1 01:00:00 1970
ID Date Icon Author Author Email Category OSdown ELOG Version Subject
  932   Sat Feb 12 17:31:46 2005 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2.5.6Re: erroneus encoding
> elog sends wrong HTTP headers, charset is empty and not separed from the
> next one "Connection: Keep-Alive ... this bug tells the browser that the
> encoding is "connection:" ... that is wrong.

This has to do with the "%S" vs. "%s" bug described elsewhere in this forum. 
I fixed that. The validator link above now also reports error free.
  935   Sat Feb 12 17:48:51 2005 Reply Stefan Rittstefan.ritt@psi.chCommentLinux2.5.6 cvs[patch] Re: images attached shown as inline
Are you sure that this does not stretch small images? Please see elog:931

> two new elog.conf parameters are defined:
> Attached image width          ; width of full view image attached
> Attached image width entry    ; width of attached image in the entry list view

I would rather go with a new class in the CSS file to contain this options, since I 
want to keep the number of options as small as possible.
  936   Sat Feb 12 18:00:48 2005 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.5.6-1Re: MIME encoding of mail?
What you can try is to debug the communication between elogd and the SMTP
server. Just turn on logging via

Logfile = log.txt
Logging level = 3

After sending email, you see the conversation in log.txt. Maybe this gives you
some hints.
  937   Sat Feb 12 20:11:48 2005 Question Stefan Rittstefan.ritt@psi.chQuestionLinux Re: Help with configuration newbie
> 1. When replying to another reply in a thread, the author_name attribute is
> not substitued (as desired). Since this is a mandatory field, we are not
> able to send the reply message. However, reply to the originial message
> works fine.

Preset on reply Author = $long_name

Do not use "Remove on reply".

> 2. "Use Email From = string" prepends an additional "" to the "From"
> field in the e-mails.

This has been fixed recently, please update.

> 3. "Fixed Attributes Reply = Subject" fixes the subject line while replying.
> However when we add "Category" attribute to this list, it breaks.

I tried to use your config file and add

Fixed attributes reply = Subject, Category

and it worked as expected. What kind of "break" did you observe?
  938   Sat Feb 12 20:51:43 2005 Disagree Anand Senguptaanandss@iucaa.ernet.inQuestionLinux Re: Help with configuration newbie
> > 1. When replying to another reply in a thread, the author_name attribute is
> > not substitued (as desired). Since this is a mandatory field, we are not
> > able to send the reply message. However, reply to the originial message
> > works fine.
> 
> Preset on reply Author = $long_name
> 
> Do not use "Remove on reply".

This worked. Thanks.

> 
> > 2. "Use Email From = string" prepends an additional "" to the "From"
> > field in the e-mails.
> 
> This has been fixed recently, please update.

Agani, thanks for the information.

> 
> > 3. "Fixed Attributes Reply = Subject" fixes the subject line while replying.
> > However when we add "Category" attribute to this list, it breaks.
> 
> I tried to use your config file and add
> 
> Fixed attributes reply = Subject, Category
> 
> and it worked as expected. What kind of "break" did you observe?

For me, when I put the Category in the fixed attributes for reply, I see the
Category but when I actually try to send the message - it says Category not
entered. I am sure I am doing something very stupid. Please help.

- Anand.
  939   Sun Feb 13 16:43:05 2005 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux Re: Help with configuration newbie
> For me, when I put the Category in the fixed attributes for reply, I see the
> Category but when I actually try to send the message - it says Category not
> entered. I am sure I am doing something very stupid. Please help.

No, it was a bug, which I could reproduce now. I fixed it in revision 1.554. It will
be contained in the next release.
  943   Mon Feb 14 18:49:44 2005 Warning Recai Oktasroktas@omu.edu.trInfoLinux2.5.7Re: ELOG security vulnerability fixed, IMPORTANT!!!!
Attention to Debian users;

I've prepared the fixed package and also contacted to Debian Security Team for
an urgent security upload.  Since then you may wish to update your package from
the following URL:

  http://l10n-turkish.alioth.debian.org/debian/elog_2.5.7+r1558-1_i386.deb

Or you can also make an update via apt-get by adding the below line to your
'/etc/apt/sources.list' file:

  deb http://l10n-turkish.alioth.debian.org/debian/ ./

> The second vulnerability had to do with write passwords. If you put a "write
> password = xxx" statement into your config file, it was still possible to
> download the config file with a special hand-written URL, and decode the
> write password, which is usually only base-64 encoded unless you haven't
> compiled elog with the -DHAVE_CRYPT flag.

FYI, Debian package has already been compiled with this flag.

 -- Recai Oktas, Maintainer of Debian package
  947   Wed Feb 16 08:45:54 2005 Agree Emiliano GabrielliAlberT@SuperAlberT.itBug reportLinux2.5.6Re: preselected values and conditional options
> > ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; 
> > Attributes = Author, Type, Category, Subject 
> > Required Attributes = Author, Type, Subject 
> > Options Type = Deposition{1}, Arc Studies{1}, Conditioning{1}, Vacuum{2}, 
> > Other{3} 
> > Preset Type = Deposition 
>  
> The "Preset xxx" option actually never was ment to be used with conditional 
> attributes. I added that functionality in rev. 1.553. Please give it a try. 
 
it works fine !!! thank you so much (btw, using Preset xxx{1} it doesn't 
works.. but it should be the correct beaviour) 
ELOG V3.1.5-3fb85fa6