Your message dated Sat, 02 Aug 2008 14:32:06 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#493084: fixed in sane-backends 1.0.19-16
has caused the Debian Bug report #493084,
regarding sane-utils: saned does not set process group ID properly
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)


-- 
493084: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493084
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: sane-utils
Version: 1.0.19-15
Severity: important

The Debian-specific patch to saned(8) that implements the -a command line
option does not work properly when setting the process group ID. There
are two problems with it:

1. It does a seteuid(2) before setegid(2), so the setegid(2) will fail
with EPERM. It should do the setegid(2) while it still has root
privileges.

2. It does not set the supplemental group IDs. By default, saned would
run as saned:saned, but needs group "scanner" permissions to open USB
devices. The patch should use getgrouplist(3) followed by setgroups(2)
to set the supplemental group list.

Finally, the result of system calls should be checked and appropriate
error paths taken. Had this been done, this bug would not have made it
past release.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.25.11-orthanc-1 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages sane-utils depends on:
ii  adduser                      3.108       add and remove users and groups
ii  debconf [debconf-2.0]        1.5.23      Debian configuration management sy
ii  libavahi-client3             0.6.23-2    Avahi client library
ii  libavahi-common3             0.6.23-2    Avahi common library
ii  libc6                        2.7-13      GNU C Library: Shared libraries
ii  libieee1284-3                0.2.11-5    cross-platform library for paralle
ii  libsane                      1.0.19-15   API library for scanners
ii  libusb-0.1-4                 2:0.1.12-12 userspace USB programming library
ii  update-inetd                 4.30        inetd configuration file updater

Versions of packages sane-utils recommends:
ii  avahi-daemon                  0.6.23-2   Avahi mDNS/DNS-SD daemon

Versions of packages sane-utils suggests:
pn  unpaper                       <none>     (no description available)

-- debconf information:
  sane-utils/saned_run: true
  sane-utils/saned_scanner_group: true



--- End Message ---
--- Begin Message ---
Source: sane-backends
Source-Version: 1.0.19-16

We believe that the bug you reported is fixed in the latest version of
sane-backends, which is due to be installed in the Debian FTP archive:

libsane-dbg_1.0.19-16_amd64.deb
  to pool/main/s/sane-backends/libsane-dbg_1.0.19-16_amd64.deb
libsane-dev_1.0.19-16_amd64.deb
  to pool/main/s/sane-backends/libsane-dev_1.0.19-16_amd64.deb
libsane_1.0.19-16_amd64.deb
  to pool/main/s/sane-backends/libsane_1.0.19-16_amd64.deb
sane-backends_1.0.19-16.diff.gz
  to pool/main/s/sane-backends/sane-backends_1.0.19-16.diff.gz
sane-backends_1.0.19-16.dsc
  to pool/main/s/sane-backends/sane-backends_1.0.19-16.dsc
sane-utils_1.0.19-16_amd64.deb
  to pool/main/s/sane-backends/sane-utils_1.0.19-16_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Julien BLACHE <[EMAIL PROTECTED]> (supplier of updated sane-backends package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Thu, 31 Jul 2008 11:46:53 +0200
Source: sane-backends
Binary: sane-utils libsane libsane-dev libsane-dbg
Architecture: source amd64
Version: 1.0.19-16
Distribution: unstable
Urgency: low
Maintainer: Julien BLACHE <[EMAIL PROTECTED]>
Changed-By: Julien BLACHE <[EMAIL PROTECTED]>
Description: 
 libsane    - API library for scanners
 libsane-dbg - API development library for scanners [debug symbols]
 libsane-dev - API development library for scanners [development files]
 sane-utils - API library for scanners -- utilities
Closes: 493084
Changes: 
 sane-backends (1.0.19-16) unstable; urgency=low
 .
   * debian/patches/30_new_saned.dpatch:
     + Updated; Fix seteuid()/setegid() call order and set supplemental group
       list (closes: #493084).
Checksums-Sha1: 
 adcd17d62c5be7031b2df2ab8ac6cd8363eb8040 1407 sane-backends_1.0.19-16.dsc
 29b56243ac034fcfffb755db87a269f9f156d809 155600 sane-backends_1.0.19-16.diff.gz
 1074083fa0f753d7348b8d4dbd8b2ab6017c76a3 149172 sane-utils_1.0.19-16_amd64.deb
 717bdc1f608d137a53a2e5e24366a05010f78504 3665346 libsane_1.0.19-16_amd64.deb
 90c4ec651d93fa4d1a0eec4efa709d86319303f8 3151656 
libsane-dev_1.0.19-16_amd64.deb
 ee3274f53bf24b9b2ba9bc2ad66a12a7633cef0c 3768008 
libsane-dbg_1.0.19-16_amd64.deb
Checksums-Sha256: 
 f8e3795adce9cd616e37b6bf48234b5f02f96cc003d6d1ebb3d2fde335dd2b3e 1407 
sane-backends_1.0.19-16.dsc
 3eee2faf8055ceb35c1f1de15375cdd851aba680092cc9744fdfd366c9984e14 155600 
sane-backends_1.0.19-16.diff.gz
 5aad4e7e58bcd7462fd7920c6d654b8760cc1410558985fa486d220342010e24 149172 
sane-utils_1.0.19-16_amd64.deb
 6f698c51f056ea45cc9b155d332f6e742bb80157315d71b261b7edfab8b8ed38 3665346 
libsane_1.0.19-16_amd64.deb
 b8e414ecb094303bf195b47ceed49c26729d0a9c8d806b3f2a50c754a8592cd3 3151656 
libsane-dev_1.0.19-16_amd64.deb
 ce86e1345103de6413255c72a8c7a2efb7bb6d52285e674da78597a4ebdd49c1 3768008 
libsane-dbg_1.0.19-16_amd64.deb
Files: 
 f4b09b684c9ec0f72fd5c947530fe654 1407 graphics optional 
sane-backends_1.0.19-16.dsc
 4e3cf2c199308ab03bd4e1d6d0f4bc26 155600 graphics optional 
sane-backends_1.0.19-16.diff.gz
 8f258215e6290faba2e832ba32c433c4 149172 graphics optional 
sane-utils_1.0.19-16_amd64.deb
 245baa85d39be472f8fc8aaa15eaba2b 3665346 libs optional 
libsane_1.0.19-16_amd64.deb
 66e17a36fed8e2fb17d5e3f78b784436 3151656 libdevel optional 
libsane-dev_1.0.19-16_amd64.deb
 a0ab48aad961aa62b6ea183b0c818770 3768008 libdevel extra 
libsane-dbg_1.0.19-16_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFIlG1OzWFP1/XWUWkRAnI/AJ9nKNo2hB6LFctRoq0UZRQnruTgYQCgkF+Q
pYFTmWkJRga2p4kH7yo1kS0=
=d7jO
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to