Marcel Hellkamp

[BUG] - Default install fails in privileged LXC Container

4

**Describe the bug** Starting with commit e177bc3a863c8145ef018b083e5afb9416398eb1, the freeswitch tasks try to install `auditd` and `apparmor-utils` if `bbb_container_compat` is false. Installing `auditd` in an LXC container fails, even in privileged...

[BUG] - use disabledFeatures=learningDashboard instead of learningDashboardEnabled=false

2

BBB 2.5 complains about: `WARN o.b.api.ParamsProcessorUtil - [DEPRECATION] use disabledFeatures=learningDashboard instead of learningDashboardEnabled=false`

Credentials are ignored for websocket connections.

9

**Describe the bug** There is currently no way (I know of) to protect a `@ServerEndpoint` with standard basic auth. The `Authorization` header is ignored and the `Session.getUserPrincipal()` property is not...

[SSO] Allow SSO users to choose their preferred username on first login

2

### Pitch Allow SSO users to choose their own `username` on first login and make it independent from the `uid` used to map SSO identities. ### Motivation I'm currently trying...

First prototype for a new non-blocking multipart parser that can be used in async applications and frameworks. The existing parser is re-written to use this new parser to simplify development...

Prevent multiple parallel --renew runs on same domain

2

Running `acme.sh --renew` multiple times in parallel may break the `$domain.conf` file and prevent future runs from succeeding. We faced this issue after a manual and a cron-triggered run happened...

fix: cgi.FieldStorage not available in Python 3.13

9

cgi.FieldStorage (used for multipart parsing) was deprecated in Python 3.11 and removed in 3.13. We now have to ship our own implementation (mostly a copy&paste from the `multipart` module)

bug report: opendkim/SigningTablen contained wildcard

1

### 📝 Preliminary Checks - [X] I tried searching for an existing issue and followed the [debugging docs](https://docker-mailserver.github.io/docker-mailserver/latest/config/debugging/) advice, but still need assistance. ### 👀 What Happened? Unsure how this...

Rework `clamd` command protocol (insecure by design)

3

Disclaimer: The described issues are [public](https://blog.erratasec.com/2016/06/scanning-for-clamav-0day.html) [knowledge](https://nmap.org/nsedoc/scripts/clamav-exec.html) [since](https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1930393) [at](https://github.com/rapid7/metasploit-framework/pull/17672) [least](https://archcloudlabs.com/projects/disabling-clamav-as-unprivileged-user/) [2008](https://marc.info/?l=clamav-users&m=120847218524735&w=2) and the Cisco Product Security Incident Response Team ([PSIRT](https://github.com/Cisco-Talos/clamav/security#how-do-i-submit-my-vulnerability-report)) suggested to discuss this openly when I reported the findings...

Raspberry PI does not support OpenGL/GLFW very well. The easiest approach would be to add a `canvas_fb.c` that implements the canvas interface but writes directly to a mapped `/dev/fb0`, which...