Package: bash Version: 3.1-5 Severity: critical Tags: security Justification: breaks the whole system
Bash completion leads to a broken pipe with system break. Following commands: ls ~ <TAB> || more ~ <TAB> || or any other with ~ as asterix. The user autocompletion list is printed, afterwards no commands can be submitted due to a broken pipe. The system stalls. Problem does only occure if user information are retrieved via LDAP. If disabling LDAP in nswitch, local users does not bring up the error. following LDAP packages are installed: ii autofs-ldap 4.1.4-11 LDAP map support for autofs ii ldap-utils 2.3.25-1 OpenLDAP utilities ii libldap-2.3-0 2.3.25-1 OpenLDAP libraries ii libldap2 2.1.30-13+b1 OpenLDAP libraries ii libnss-ldap 251-5.1 NSS module for using LDAP as a naming service ii libpam-ldap 180-1.1 Pluggable Authentication Module allowing LDAP interfaces -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.16.11-p4 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Versions of packages bash depends on: ii base-files 3.1.16 Debian base system miscellaneous f ii debianutils 2.17 Miscellaneous utilities specific t ii libc6 2.3.6.ds1-4 GNU C Library: Shared libraries ii libncurses5 5.5-3 Shared libraries for terminal hand bash recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
