[Rt-devel] insecure dependency errors with version 3.0.10 and later

Jesse Vincent jesse at bestpractical.com
Wed May 19 15:32:05 EDT 2004




On Wed, May 19, 2004 at 09:29:02PM +0200, Dirk Pape wrote:
> >So the change was to add a call to RT::DropSetGIDPermissions in the
> >fastcgi handler.
> 
> hey this is really fast chatting, thanks.

:)

> Is this change already present in 3.0.11rc3?

Yes. which is part of why I'm surprised that you're still seeing the
Maketext issue.  One answer that may be what we need to do longer-term
is switch to using apache suexec rather than a setgid perl script. 

> Dirk

-- 


More information about the Rt-devel mailing list