Custom query (1090 matches)
Results (115 - 117 of 1090)
Ticket
|
#1329 |
Description |
As per email thread below, OSGeo-Live is effected by the heartbleed vulnerability in OpenSSL. http://heartbleed.com/
On Sat, Apr 12, 2014 at 8:40 AM, Alex Mandel wrote:
You are correct, from a server side someone would have to make services
available on https.
From a client side, it is possibly vulnerable in the same way non
service packages are in OSGeo4w.
The example in IRC today, which I have not verified. QGIS connects to a
WMS via https, that https service probes the local QGIS instance for
memory dumps.
I say we just post the how to fix it if you're concerned instructions
and leave it at that. Obviously it will be fixed in the next version
without additional work on our part. We could also reiterate that we do
not intend of OSGeo Live to be used in Production Servers as is.
Thanks,
Alex
On 04/11/2014 03:36 PM, Brian Hamlin wrote:
My understanding is that the OSGeo Live is *not* vulnerable as it is,
because we do not provide services (like https) out of the box that use
the TLS mechanism on top of openssl. If someone was to add those
services, it would no longer be the distribution that we made available.
With that said, it is certainly a good idea to update openssl and
related packages, update the .iso image, and put that on the servers
--
Brian M Hamlin
OSGeo California Chapter
blog.light42.com
On Apr 11, 2014, at 2:09 PM, Cameron Shorter wrote:
Hamish, Brian, Angelos, Alex,
I assume that OSGeo-Live (and other OSGeo servers) would contain the
heartbleed vulnerability?
I suggest that we should put out a similar statement to the one below.
What would be our recommended course of action to uses?
|
#1348 |
Description |
Hi,
installing tilemill from the developmentseed ppa fails on 14.04 with:
invoke-rc.d: unknown initscript, /etc/init.d/tilemill not found.
dpkg: error processing package tilemill (--configure):
subprocess installed post-installation script returned error exit status 100
outside of a chroot it works fine.
note we were having similar trouble with libpam-systemd recently and in that case had to hack the .postinst script by hand not to exit with an error. launchpad bug exists for that, root cause still unknown.
disabling the tilemill installer until this is fixed since is makes all apt-get installs that follow exit with an error code.
thanks,
Hamish
|
#1352 |
Description |
pkg_resources.DistributionNotFound: PIL>1.1.6, <1.2.99
|
Note:
See
TracQuery
for help on using queries.