{"action":"created","issue":{"url":"https://api.github.com/repos/ampache/ampache/issues/1337","repository_url":"https://api.github.com/repos/ampache/ampache","labels_url":"https://api.github.com/repos/ampache/ampache/issues/1337/labels{/name}","comments_url":"https://api.github.com/repos/ampache/ampache/issues/1337/comments","events_url":"https://api.github.com/repos/ampache/ampache/issues/1337/events","html_url":"https://github.com/ampache/ampache/issues/1337","id":166394021,"number":1337,"title":"httpoxy","user":{"login":"Phyks","id":3856586,"avatar_url":"https://avatars.githubusercontent.com/u/3856586?v=3","gravatar_id":"","url":"https://api.github.com/users/Phyks","html_url":"https://github.com/Phyks","followers_url":"https://api.github.com/users/Phyks/followers","following_url":"https://api.github.com/users/Phyks/following{/other_user}","gists_url":"https://api.github.com/users/Phyks/gists{/gist_id}","starred_url":"https://api.github.com/users/Phyks/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Phyks/subscriptions","organizations_url":"https://api.github.com/users/Phyks/orgs","repos_url":"https://api.github.com/users/Phyks/repos","events_url":"https://api.github.com/users/Phyks/events{/privacy}","received_events_url":"https://api.github.com/users/Phyks/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/ampache/ampache/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-07-19T17:56:39Z","updated_at":"2016-07-20T19:21:06Z","closed_at":null,"body":"<!-- Delete any not relevant section in this template -->\r\n\r\n# Environment\r\n\r\n * Ampache version: any\r\n * Web server + version:\r\n * Server operating system:\r\n * Client operating system:\r\n\r\n<!-- Keep only the affected clients in the list below. Add client application name and version on the right of the client type you use. -->\r\n\r\n * Client type:\r\n   - any\r\n\r\n# Settings\r\n\r\n<!-- Put here a description of your settings or attach ampache.cfg.php after removing sensitive information (server host, database connection...) -->\r\n\r\n# Description\r\n\r\n<!-- Put here the bug/feature description and how to reproduce/integrate it. -->\r\n\r\nAmpache depends on Guzzle (which is affected by httpoxy) and makes external calls to servers. I think Ampache may be sensitive to httpoxy attacks, and we should investigate it further and eventually bump some versions in composer and/or update the recommended vhosts in the wiki.\r\n\r\nhttps://httpoxy.org\r\nOwncloud already mitigated the issue for instance: https://owncloud.org/blog/owncloud-9-0-4-8-2-7-8-1-9-8-0-14-released/\r\n\r\n# Logs\r\n\r\n<!-- [Ampache logs](https://github.com/ampache/ampache/wiki/Troubleshooting#enable-logging) and web server access/error logs in attached files. Please also add client application logs if appropriate. -->\r\n"},"comment":{"url":"https://api.github.com/repos/ampache/ampache/issues/comments/234053685","html_url":"https://github.com/ampache/ampache/issues/1337#issuecomment-234053685","issue_url":"https://api.github.com/repos/ampache/ampache/issues/1337","id":234053685,"user":{"login":"Afterster","id":2251352,"avatar_url":"https://avatars.githubusercontent.com/u/2251352?v=3","gravatar_id":"","url":"https://api.github.com/users/Afterster","html_url":"https://github.com/Afterster","followers_url":"https://api.github.com/users/Afterster/followers","following_url":"https://api.github.com/users/Afterster/following{/other_user}","gists_url":"https://api.github.com/users/Afterster/gists{/gist_id}","starred_url":"https://api.github.com/users/Afterster/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Afterster/subscriptions","organizations_url":"https://api.github.com/users/Afterster/orgs","repos_url":"https://api.github.com/users/Afterster/repos","events_url":"https://api.github.com/users/Afterster/events{/privacy}","received_events_url":"https://api.github.com/users/Afterster/received_events","type":"User","site_admin":false},"created_at":"2016-07-20T19:21:06Z","updated_at":"2016-07-20T19:21:06Z","body":"I believe you're right here. Main problem will be cross-dependencies here... We may have to wait for dependencies to update themselves first.\r\n\r\nThat's indeed is perfect issue for the leet issue :)."}}
{"actor":{"display_login":"Afterster"}}