Your message dated Tue, 25 Sep 2012 03:03:03 +0000
with message-id <[email protected]>
and subject line Bug#687818: fixed in tomcat6 6.0.35-5
has caused the Debian Bug report #687818,
regarding tomcat6: postinst modifies conffile /etc/logrotate.d/tomcat6
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
687818: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=687818
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: tomcat6
Version: 6.0.35-4
Severity: serious
Justification: Policy 10.7.3
User: [email protected]
Usertags: piuparts
Control: found -1 tomcat6/6.0.35-1+squeeze2
Hi,
during a test with piuparts I noticed that your package ships a conffile
that is modified by the postinst script. This is forbidden by the
policy, see
http://www.debian.org/doc/debian-policy/ch-files.html#s-config-files
"The easy way to achieve this behavior is to make the configuration
file a conffile. [...] This implies that the default version will be
part of the package distribution, and must not be modified by the
maintainer scripts during installation (or at any other time)."
The mishandled conffile is /etc/logrotate.d/tomcat6
Cheers,
Andreas
--- End Message ---
--- Begin Message ---
Source: tomcat6
Source-Version: 6.0.35-5
We believe that the bug you reported is fixed in the latest version of
tomcat6, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
tony mancill <[email protected]> (supplier of updated tomcat6 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Mon, 06 Aug 2012 21:29:11 -0700
Source: tomcat6
Binary: tomcat6-common tomcat6 tomcat6-user libtomcat6-java libservlet2.4-java
libservlet2.5-java libservlet2.5-java-doc tomcat6-admin tomcat6-examples
tomcat6-docs tomcat6-extras
Architecture: source all
Version: 6.0.35-5
Distribution: unstable
Urgency: low
Maintainer: Debian Java Maintainers
<[email protected]>
Changed-By: tony mancill <[email protected]>
Description:
libservlet2.4-java - Transitional package for libservlet2.5-java
libservlet2.5-java - Servlet 2.5 and JSP 2.1 Java API classes
libservlet2.5-java-doc - Servlet 2.5 and JSP 2.1 Java API documentation
libtomcat6-java - Servlet and JSP engine -- core libraries
tomcat6 - Servlet and JSP engine
tomcat6-admin - Servlet and JSP engine -- admin web applications
tomcat6-common - Servlet and JSP engine -- common files
tomcat6-docs - Servlet and JSP engine -- documentation
tomcat6-examples - Servlet and JSP engine -- example web applications
tomcat6-extras - Servlet and JSP engine -- additional components
tomcat6-user - Servlet and JSP engine -- tools to create user instances
Closes: 608286 687818
Changes:
tomcat6 (6.0.35-5) unstable; urgency=low
.
* Apply patch to README.Debian to explain setting the HTTPOnly flag
in cookies by default; CVE-2010-4312. (Closes: #608286)
- Thank you to Thijs Kinkhorst for the patch.
* Use ucf and a template for /etc/logrotate.d/tomcat6 file to avoid
updating the shipped conffile. (Closes: #687818)
Checksums-Sha1:
0dacc4c39e56c9083373c859963e2a729ce97ee6 2692 tomcat6_6.0.35-5.dsc
f4ccffa74d7cdf7525e65a7adb20b5a085ec5bca 45421 tomcat6_6.0.35-5.debian.tar.gz
b26c20ea57899b1d30cf52ba24670a8ca5ed19c3 52626 tomcat6-common_6.0.35-5_all.deb
11a62d026f39333aa58dc2030370c8a8a4969dae 40372 tomcat6_6.0.35-5_all.deb
7e0cb554fff24c4ed6d8ced0d540814ace3ddba2 31236 tomcat6-user_6.0.35-5_all.deb
4ef10c1f7e6f6929ccb3c0a4907c2bb151e46ea2 3100452
libtomcat6-java_6.0.35-5_all.deb
1152c6cf36b081cadc3122772ca0644b49be9d45 13176
libservlet2.4-java_6.0.35-5_all.deb
2c484a8c73bdfe02080a161dcd0dc781e7c8975c 195942
libservlet2.5-java_6.0.35-5_all.deb
9145b05424ce4563d6ad38c432736b7c03b08873 255422
libservlet2.5-java-doc_6.0.35-5_all.deb
3b4e06aa11c10fc213d47b57df0b177a7b79083d 48170 tomcat6-admin_6.0.35-5_all.deb
aeb337489ed62ab28349389e8273655219de8f37 163128
tomcat6-examples_6.0.35-5_all.deb
05e665fc389b90155437e10f9ae1214ea2d16e1d 567540 tomcat6-docs_6.0.35-5_all.deb
6d55c77f58a1db078953d83880b02a1491ed0245 13376 tomcat6-extras_6.0.35-5_all.deb
Checksums-Sha256:
a6aa73ff380c54129d46f48def1db75b4a490d37f9ae5384e9024b99077e2cf0 2692
tomcat6_6.0.35-5.dsc
f3772ca546a6908f028506ef8c185a36ff50deff146ddf16689701935210c5a1 45421
tomcat6_6.0.35-5.debian.tar.gz
86ecfb1a2612536f13631ba6c3ca53834542088e877eec93d0280ade64c1ec78 52626
tomcat6-common_6.0.35-5_all.deb
605dba0d1e3150ec254a43204854dd565fca130c7216b824941c3f8cc3a283f3 40372
tomcat6_6.0.35-5_all.deb
2067a756e1b8b68b5425aea03cb1ceddd33267cd957cd0d7d4bddb730eb8f21e 31236
tomcat6-user_6.0.35-5_all.deb
dc69d38b2e2e55a888c2db19f1626615706664cd738e148cb2f7efa7612eeb86 3100452
libtomcat6-java_6.0.35-5_all.deb
cda7b9dae83695db697fdee4d524713844000f1610aad3300b234c3971a8fd7b 13176
libservlet2.4-java_6.0.35-5_all.deb
9ebbe0210c1f0acba33b7bed5cfbdaaedf3a4496744b74efd91b2bada37db04c 195942
libservlet2.5-java_6.0.35-5_all.deb
cc56b4be531b0fe4873b43b3f5b4ba426b6fe6089548f30197180e4c98192709 255422
libservlet2.5-java-doc_6.0.35-5_all.deb
7fdbefe61ba0479d109e108badfe0f70def150df0ff0aa5ae06437a9639cb9f9 48170
tomcat6-admin_6.0.35-5_all.deb
5910eb8de040d1e7288bf358cb9303cec17aec655c7b4b5c2ebd71ed9a8c4c9f 163128
tomcat6-examples_6.0.35-5_all.deb
467f0fe3176e202fed24f4f80dca3223068d020e2c8b5fa6a186504bd9fe87aa 567540
tomcat6-docs_6.0.35-5_all.deb
76f88f1b56935e2e005d39f6decd5e8cbce1b9817aaa37ee673b19bf4e1d9768 13376
tomcat6-extras_6.0.35-5_all.deb
Files:
8f9e0b5614d3f1ca75dac030bdcfedb0 2692 java optional tomcat6_6.0.35-5.dsc
76736d84090bdd27baa0d4ab019f528d 45421 java optional
tomcat6_6.0.35-5.debian.tar.gz
72b85a127e23dcc193a99d91550e42f3 52626 java optional
tomcat6-common_6.0.35-5_all.deb
dc2d03144173e0012ee704d1f9bd6635 40372 java optional tomcat6_6.0.35-5_all.deb
28a78599184b813975cfe665bb755222 31236 java optional
tomcat6-user_6.0.35-5_all.deb
ef074df6b044f162a876dd4167e16c85 3100452 java optional
libtomcat6-java_6.0.35-5_all.deb
8cd125decbd763d3ddbe930ff256347e 13176 oldlibs extra
libservlet2.4-java_6.0.35-5_all.deb
860511863656fe921db1b869ab425500 195942 java optional
libservlet2.5-java_6.0.35-5_all.deb
aad528fd1b21283f83c9e4c4ce3ab128 255422 doc optional
libservlet2.5-java-doc_6.0.35-5_all.deb
0c13736a1a4dc6e979396af39eec37d4 48170 java optional
tomcat6-admin_6.0.35-5_all.deb
924dcf672c42b5673cdbd2d9baa27738 163128 java optional
tomcat6-examples_6.0.35-5_all.deb
5e483f311db4bd710ece8d19093d2d6a 567540 doc optional
tomcat6-docs_6.0.35-5_all.deb
26a9bedcf363d5e38e5c11b1739fdf57 13376 java optional
tomcat6-extras_6.0.35-5_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iQIcBAEBAgAGBQJQYRrFAAoJECHSBYmXSz6WijwP/23hj9xemZAKhkgOw3PZhpie
PYkcx3ukiP+fRkNLA/AKiR1GdkKWqTl+PGfrDiW0R+YhS6CR+eM/zzK5GAMQc1aI
o0/flz4arAHvXeIZ3Jt78qyEcd6+elevdGi6H+bPENRAx+eoZF7YVD/EChNNs6Tm
5mLK0pEGuC4XHK8wHaCKM8Aatpng4Fnxy0fTuCdJNoVbSbxRoaJTvm4ObNObcA2w
Ve4RUYTfXlXcsEzQvAwUh1kij4bK0hzvONsIrEKOX3X2cE4s4YrkoC2iDOAQMUjI
djwIX6G6vD4IZZOWiPpB27UZssxAscP/RYIdZyZwm2GloaMZQ1bIK89yzSVAXSdY
QYyR9d/XYqVF9C7cEsHOaAg8MnP2fkcqXTmDSjzok9rfGFOngO5gBQCsZJ9gDv7L
CE3dm8/GJV7j/GDPfq30F0uPeb+rQDqOX1pUqc3dOwhXvn9EtJ3duHhJuaCy19le
G1cjW2/394s/iDtWwY9bTloqPitIKltoqdgbYaat9rChTMVbsFY0i8ooKxOO+d5f
T4RO76C5ak/3lrKkCwpY/OfSeW2LRsS7BDFPIZDCuAP+Gb/lhjbOn0ta22CDbZkK
rmqqCzUtsuhliWF1WK/vMEoN970xw0JZF0yDdLWgSnZG1B2A276gRfF7vRnYHKpk
MYQhXtDfKFXe0p60J7ya
=93Ee
-----END PGP SIGNATURE-----
--- End Message ---
