Your message dated Fri, 20 Jan 2017 11:33:48 +0000
with message-id <[email protected]>
and subject line Bug#845177: fixed in bash 4.4-3
has caused the Debian Bug report #845177,
regarding clear_console: assumes VT switch clears scrollback
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
845177: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845177
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: bash
Version: 4.4-2
Severity: normal

Hi!
The bash package includes a Debian-specific program, "clear_console".  It
clears the screen then naively tries to nuke the scrollback by briefly
switching to another virtual console then switching back.  This worked only
accidentally thanks to a quirk of the Linux console -- no other tabbed/etc
terminal I know loses scrollback on switch.  And now, Manuel Schölling has
submitted a patch that eliminates this loss.

That patch comes with a config option that defaults to "n" precisely because
of Debian's clear_console, but anyone who enables it won't have his
scrollback cleared, with possible privacy loss or worse.

Since Linux 2.6.39, you can print "\e[3J" to securely erase the current
console.  While it is Linux console specific, terminals are supposed to
silently ignore unknown well-formed commands -- I've verified that FreeBSD,
Hurd and Solaris consoles (ie, kernels with a Debian port) do so; and even
if some ill-behaved terminal shows junk, you can clear the screen the old
way just to be sure.



-- System Information:
Debian Release: stretch/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500, 'testing'), 
(150, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.8.9+ (SMP w/6 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages bash depends on:
ii  base-files   9.6
ii  dash         0.5.8-2.3
ii  debianutils  4.8.1
ii  libc6        2.24-5
ii  libtinfo5    6.0+20160917-1

Versions of packages bash recommends:
pn  bash-completion  <none>

Versions of packages bash suggests:
pn  bash-doc  <none>

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: bash
Source-Version: 4.4-3

We believe that the bug you reported is fixed in the latest version of
bash, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Matthias Klose <[email protected]> (supplier of updated bash package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 20 Jan 2017 11:52:59 +0100
Source: bash
Binary: bash bash-static bash-builtins bash-doc
Architecture: source
Version: 4.4-3
Distribution: unstable
Urgency: medium
Maintainer: Matthias Klose <[email protected]>
Changed-By: Matthias Klose <[email protected]>
Description:
 bash       - GNU Bourne Again SHell
 bash-builtins - Bash loadable builtins - headers & examples
 bash-doc   - Documentation and examples for the GNU Bourne Again SHell
 bash-static - GNU Bourne Again SHell (static version)
Closes: 794588 838201 845177
Changes:
 bash (4.4-3) unstable; urgency=medium
 .
   * Apply upstream patches 006 - 007.
   * clear_console: Securely erase the current console. Closes: #845177.
   * Mark locales and time build dependencies with <!nocheck>.
     Closes: #838201.
   * Don't configure with --with-curses. Closes: #794588.
Checksums-Sha1:
 ca04df153fc755049bb3feff76e94de51162785a 2251 bash_4.4-3.dsc
 57300abe427f3c4d7006ff3a06f5788504947593 62824 bash_4.4-3.debian.tar.xz
Checksums-Sha256:
 b7500bdb16bc3a074f6039b02cb01e8602db2e56f96594209a69d5f25684aee1 2251 
bash_4.4-3.dsc
 7357f443a9d604021611122c772fbfe7ed249b8b2fb69da960cdc1ea42036c14 62824 
bash_4.4-3.debian.tar.xz
Files:
 ec75a2e3788c516e34006dfeeb3248ad 2251 base required bash_4.4-3.dsc
 7af251a9927e2b69089e691e30f5bf3e 62824 base required bash_4.4-3.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=8RUj
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to