Package: dbab
Version: 1.3.2-2

(may be related to Bug #946977)

In dbab version 1.3.2-2, the one currently included in Debian stable 
(Buster), the automatic list update script try to access the remote 
server via plain http, though the server is now using https only, and 
a "permanent redirect" is issued. The HTML redirect message is written
into the list file, replacing the old content despite of the error. 

This does not only makes dbab completely useless, but it breaks 
dnsmasq too, as it fails to start due to syntax error in included 
file:

systemd[1]: Starting dnsmasq - A lightweight DHCP and caching DNS server...
dnsmasq[10051]: dnsmasq: syntax check OK.
dnsmasq[10052]: dnsmasq: bad option at line 1 of 
/etc/dnsmasq.d/dbab.adblock.conf
dnsmasq[10052]: bad option at line 1 of /etc/dnsmasq.d/dbab.adblock.conf
dnsmasq[10052]: FAILED to start up
systemd[1]: dnsmasq.service: Control process exited, code=exited, 
status=1/FAILURE

In turn, this would likely render the whole system unuseable (at least, 
it breaks anything which relies on DNS name resolving).

A quick fix could be to patch the file:

 /usr/sbin/dbab-get-list

which is a simple shell script, replacing "http" with "https" in the
server URL.

Another option would be to update dbab to the new version (1.3.3-1,
which is currently included in testing) also in stable/Buster.



-- System Information:
Debian Release: 10.3
  APT prefers stable
  APT policy: (900, 'stable'), (500, 'stable-updates')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-8-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8), LANGUAGE=en_US (charmap=UTF-8) (ignored: LC_ALL set to 
en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dbab depends on:
ii  curl      7.64.0-4
ii  dnsmasq   2.80-1
ii  dnsutils  1:9.11.5.P4+dfsg-5.1
ii  perl      5.28.1-6

dbab recommends no packages.

dbab suggests no packages.

Reply via email to