Your message dated Fri, 28 Apr 2017 09:40:34 +0000
with message-id <[email protected]>
and subject line Bug#858695: Removed package(s) from unstable
has caused the Debian Bug report #201062,
regarding tcl8.4: Tcl_CreateInterp() creates a pipe and does not set handles to
close on exec
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
201062: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=201062
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: tcl8.4
Version: 8.4.3-3
Severity: normal
When expect is run it calls Tcl_CreateInterp() which creates a pipe on file
handles 5 and 6. These file handles are not set to close on exec so when
expect spawns a program it will receive the open file handles of it's parent.
If the program runs in a different security context then these open file
handles may allow the program to interfere with the operation of expect and
therefore gain undesired access to the system.
The file handles should be set to close on exec. If this is something that
can be done from expect (IE if the file handles are exposed to it) then please
transfer the bug to it. Otherwise please make the TCL library calls set them
cloexec.
-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux lyta 2.4.21-se2-pcmcia #1 Sat Jul 12 16:11:00 EST 2003 i686
Locale: LANG=C, LC_CTYPE=C
Versions of packages tcl8.4 depends on:
ii libc6 2.3.1-17 GNU C Library: Shared libraries an
-- no debconf information
--- End Message ---
--- Begin Message ---
Version: 8.4.20-8+rm
Dear submitter,
as the package tcl8.4 has just been removed from the Debian archive
unstable we hereby close the associated bug reports. We are sorry
that we couldn't deal with your issue properly.
For details on the removal, please see https://bugs.debian.org/858695
The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.
This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
[email protected].
Debian distribution maintenance software
pp.
Chris Lamb (the ftpmaster behind the curtain)
--- End Message ---
_______________________________________________
Pkg-tcltk-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-tcltk-devel
