Package: dbconfig-common
Version: 2.0.4
Severity: normal

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Running dpkg-reconfigure on a package that is using dbconfig-common will loose
the password when the admin opts out of the reinstallation of the database.

The issue is at line 128 in dpkg/config.

Without really thorough thinking I think the behavior is also wrong for the
case where the admin opts in for reinstallation of the database. I think that
if the admin doesn't fill in a new password, the old one should probably be 
used.

The whole reconfigure behavior should probably be reevaluated.

- -- System Information:
Debian Release: 8.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable'), (60, 'unstable'), (50, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJXSDuEAAoJEJxcmesFvXUKc/UIAKhc/1GhYBNnT5dbaHNsZLJv
0OZimKr8yiFKrmxNzSjmgXQRq9eYwa2GV6xmKU9cwcNuCSvlUR6U/381+aRDGUu6
SQj3wjVKaa+bgtiztPQyjV9TX5gRAnJZBiOAMlZNQ34dBZxG1WwF2A5k3Wfl5eS8
5gCa3Q7cudrZwj+AKWCW6wibkWs/uyaMPiawJi4cxpByJXn0v6n+g1XvovZQfh5u
Csrc83ozq8HnD+rf/A9NLk8AUTHFVd25RFFaGQlejw/8enEsz2psL2C2Q51CC7ej
/7YQHwQZ1rB7EcO9HEWODBR98wksxVgJygUXwR6zyGLeSzi1MZ7gfPB63pN0DEQ=
=E2Lw
-----END PGP SIGNATURE-----

Reply via email to