Your message dated Wed, 23 Jan 2019 13:04:18 +0000
with message-id <[email protected]>
and subject line Bug#920242: fixed in dpkg 1.19.4
has caused the Debian Bug report #920242,
regarding start-stop-daemon: matching only on world-writable pidfile /dev/null
is insecure (No such file or directory)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
920242: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920242
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: dpkg
Version: 1.19.3
Severity: serious
Justification: makes the package in question unusable or mostly so
Dear Maintainer,
Since the 1.19.3 upgrade pbuilder environment are broken:
I: Extracting source
/sbin/start-stop-daemon: matching only on world-writable pidfile /dev/null is
insecure (No such file or directory)
E: pbuilder: Failed extracting the source
Should that really be a terminal error?
Kind Regards,
Bas
--- End Message ---
--- Begin Message ---
Source: dpkg
Source-Version: 1.19.4
We believe that the bug you reported is fixed in the latest version of
dpkg, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guillem Jover <[email protected]> (supplier of updated dpkg package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 23 Jan 2019 13:06:39 +0100
Source: dpkg
Architecture: source
Version: 1.19.4
Distribution: unstable
Urgency: medium
Maintainer: Dpkg Developers <[email protected]>
Changed-By: Guillem Jover <[email protected]>
Closes: 920242
Changes:
dpkg (1.19.4) unstable; urgency=medium
.
* start-stop-daemon: Do not sanity check the pidfile when it is specified as
/dev/null, as that implies the caller wants to start the program no matter
what. Closes: #920242
* Portability:
- start-stop-daemon: Only use SO_PASSCRED if defined. Fixes build failure
at least on GNU/Hurd.
* Packaging:
- autopkgtest: Pass --disable-nls and --disable-dselect to configure.
- autopkgtest: Change Depends to «build-essential, autoconf, pkg-config».
Checksums-Sha1:
36eba1fe4f003dd70ceb9ae697664560deff3d60 2112 dpkg_1.19.4.dsc
ff6741081ed8a34d9f2dcf3d7eace618a181ae72 4645784 dpkg_1.19.4.tar.xz
958c84a53c9f36fa86162c9c18621acd85d8d158 7213 dpkg_1.19.4_amd64.buildinfo
Checksums-Sha256:
659f6d2deeabe88944eecc69710b77bb34d55b7cf6ffe76cdab7dc735ca75f63 2112
dpkg_1.19.4.dsc
c15234e98655689586bff2d517a6fdc6135d139c54d52ae9cfa6a90007fee0ae 4645784
dpkg_1.19.4.tar.xz
65621449ca4eee494cf7faa0fe331f05a8f95a7f28134f81a7385cb6b8903444 7213
dpkg_1.19.4_amd64.buildinfo
Files:
78ab5de4d7b37204c0737ae3592c5d6b 2112 admin required dpkg_1.19.4.dsc
1e4420409426d8c58bbe13a8e07c0c0b 4645784 admin required dpkg_1.19.4.tar.xz
218f152f07c2c4c17a2657e321f20458 7213 admin required
dpkg_1.19.4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEETz509DYFDBD1aWV0uXK/PqSuV6MFAlxIYzEACgkQuXK/PqSu
V6PBVQ//ZQoXJH63TB3TkMaxgss4o6/8S7z3RGYBnjbQ28dKxG8cE3zAeRzK5aUY
Tw4VYx8dGf4cvs5YrEUh/zOfwGW3MtFXZ0DenkrSLzpzbLWtSl/Jf24/L7hE6Yeu
aJM5LsNPwEzXOKjXA7nBxV2F09gRYPkLQ2Ub3hAlwMQMzk9Owg/E+SXbjv4zFN6T
TEsT0t6bj769kpkq6rmZ/cSSeQXUP5zPKgaKTq1NMMP3xCw9t4oFT6QZINFou2Dk
C1NuUqQS9apHg5uY7+9hoExD+lQke791zrq0ZLbreFY2GdpfpMsyvEch4EocoW9x
Jv3SZQBOOaQ/bY/MIo+ZZ7vHCGWNLfF8dNPcQ6iYzieKLytXwpVWDyQrE5hEi0Xz
ywh/YwFQIog51H3YI73kOapoD97HhYnOFzkDq2s4QXpLEL/IvDhxrXAvefE8dU3P
wXz1KgJcHmCm7uBA6IUtgyEM8Nm0BoHv2R12oAMdpddXXpZ188m5fPLd/Iz9pz8p
2JsDgm7B9zfh/1aCPOhLS4grIilfM3/5jnBaPbX2/noG1sff0JhRixO1N65u9DPg
DuU3QrqbjwYeSxpOs7xuulphKjBuKWOlOrUacYcp9VJ4BbUgbrv1DZQg/Q9MpISJ
Fwi1J5GakA0YSB0pWYCoREZWRu2IUZapuq/3mTWfA0kxNLFrMYg=
=lguo
-----END PGP SIGNATURE-----
--- End Message ---
