Your message dated Fri, 01 May 2009 23:17:03 +0000
with message-id <[email protected]>
and subject line Bug#338490: fixed in debianutils 3.1
has caused the Debian Bug report #338490,
regarding debianutils: tempfile should validate TMPDIR
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
338490: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338490
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: debianutils
Version: 2.15.1
Severity: normal
Hi, Clint.
The utilities mktemp and tempfile both assume that if TMPDIR is set,
it points to a writable directory; although that's normally true, it's
not actually guaranteed to hold. (For example, I have a system with
libpam-tmpdir enabled where a cron job [belonging to exim4-base] runs
a shell script as the Debian-exim user that tries to use tempfile but
fails because TMPDIR still points to /tmp/user/0, which only root can
access.)
mktemp makes no sanity checks whatsoever, and tempnam(3), which
tempfile uses, checks only that TMPDIR points to an *existing*
directory, not necessarily to a writable one.
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.14
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Versions of packages debianutils depends on:
ii coreutils 5.2.1-2.1 The GNU core utilities
ii libc6 2.3.5-7 GNU C Library: Shared libraries an
debianutils recommends no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: debianutils
Source-Version: 3.1
We believe that the bug you reported is fixed in the latest version of
debianutils, which is due to be installed in the Debian FTP archive:
debianutils_3.1.dsc
to pool/main/d/debianutils/debianutils_3.1.dsc
debianutils_3.1.tar.gz
to pool/main/d/debianutils/debianutils_3.1.tar.gz
debianutils_3.1_amd64.deb
to pool/main/d/debianutils/debianutils_3.1_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Clint Adams <[email protected]> (supplier of updated debianutils package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 01 May 2009 18:01:28 -0400
Source: debianutils
Binary: debianutils
Architecture: source amd64
Version: 3.1
Distribution: unstable
Urgency: medium
Maintainer: Clint Adams <[email protected]>
Changed-By: Clint Adams <[email protected]>
Description:
debianutils - Miscellaneous utilities specific to Debian
Closes: 268624 294789 312270 330289 338490
Changes:
debianutils (3.1) unstable; urgency=medium
.
[ Manoj Srivastava ]
* which.1: clarify that which does not follow symlinks. closes: #268624.
* run-parts.c: permission and sanity checks run on link targets, not
symlinks. closes: #294789.
* tempfile.c: tempfile with a suffix no longer needs hardlinks.
closes: #312270.
* savelog.8: disambiguate version numbering in manual. closes: #330289.
* tempfile.1: update manual page with up-to-date tempnam behaviors.
closes: #338490.
.
[ Clint Adams ]
* savelog.8, tempfile.1: remove spurious trailing whitespace
* savelog.8, tempfile.1, which.1: update dates in manual pages.
* po4a/po/fr.po: tweak French translations enough to reach 80%.
Checksums-Sha1:
4795cae4dae5cd9c1f3d4b5c0b1634f2c8239b62 866 debianutils_3.1.dsc
bbd3dad0177c85e93a61e4ca02324cecc73d0d4f 131938 debianutils_3.1.tar.gz
5c821a39d3502672b5fb25814ff52313fa7070f5 48688 debianutils_3.1_amd64.deb
Checksums-Sha256:
cbe2d548d4c621ddd057f0228a632d93c3ca8557f2be7d5337ae7b7e4ef43f15 866
debianutils_3.1.dsc
41fb5f117fe273a671d3ebc5dbd9d240a084d717c73349cec7c4d7fa91cb0d2d 131938
debianutils_3.1.tar.gz
f96902c9b87d10c964e39529dae40af09e29b72814e5355a29c5b230e0ec9da8 48688
debianutils_3.1_amd64.deb
Files:
c51c499507cccd2d80346c97e58a9859 866 utils required debianutils_3.1.dsc
cdddc5ca89fef4b63858de982b110a0c 131938 utils required debianutils_3.1.tar.gz
0647602a213245db76db588eeb0ac42b 48688 utils required debianutils_3.1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Debian!
iD8DBQFJ+4CF5m0u66uWM3ARAniZAKCzHb31pGsMSe7SRNdn1t3WSS2ezgCghrdR
Q/o6zhTnbCpdTTgaJRryhjY=
=3GUQ
-----END PGP SIGNATURE-----
--- End Message ---
