Processed: Re: Processed: reassign 882223 to glibc-doc

[Debian Bug Tracking System]

Processing control commands:

> reassign -1 glibc-doc-reference
Bug #882223 [glibc-doc] Document security problems with system.3 and popen.3 
(argument injection)
Bug reassigned from package 'glibc-doc' to 'glibc-doc-reference'.
Ignoring request to alter found versions of bug #882223 to the same values 
previously set
Ignoring request to alter fixed versions of bug #882223 to the same values 
previously set
> severity -1 normal
Bug #882223 [glibc-doc-reference] Document security problems with system.3 and 
popen.3 (argument injection)
Severity set to 'normal' from 'grave'

-- 
882223: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882223
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Re: Processed: reassign 882223 to glibc-doc

[Aurelien Jarno]

control: reassign -1 glibc-doc-reference
control: severity -1 normal

On 2017-11-21 12:38, Bastien ROUCARIES wrote:
> On Mon, Nov 20, 2017 at 10:14 PM, Aurelien Jarno  wrote:
> > On 2017-11-20 20:51, Debian Bug Tracking System wrote:
> >> Processing commands for cont...@bugs.debian.org:
> >>
> >> > # match possible intention of reporter
> >> > reassign 882223 glibc-doc
> >> Bug #882223 [manpages-dev] Document security problems with system.3 and 
> >> popen.3 (argument injection)
> >> Bug reassigned from package 'manpages-dev' to 'glibc-doc'.
> >> No longer marked as found in versions manpages/4.13-3.
> >> Ignoring request to alter fixed versions of bug #882223 to the same values 
> >> previously set
> >> > thanks
> >> Stopping processing here.
> >
> > Can you please point us to what has to be fixed on the glibc-doc side?
> > The system.3 and popen.3 manpages are part of manpages-dev, not
> > glibc-doc.
> 
> Online copy here:
> https://www.gnu.org/software/libc/manual/html_node/Pipe-to-a-Subprocess.html#Pipe-to-a-Subprocess
> https://www.gnu.org/software/libc/manual/html_node/Running-a-Command.html#index-system
> 
> Does not mention security problems...
> 
> 
> https://www.gnu.org/software/libc/manual/html_node/Line-Input.html#index-gets
> for instance mention security problem

This manual is non-free, so it's clearly not glibc-doc, but
glibc-doc-reference. Please check the content of packages before
reporting bug, also please avoid abusing severity even if you are upset
by the issue. Patches are welcome.

-- 
Aurelien Jarno  GPG: 4096R/1DDD8C9B
aurel...@aurel32.net http://www.aurel32.net

Re: Processed: reassign 882223 to glibc-doc

[Bastien ROUCARIES]

On Mon, Nov 20, 2017 at 10:14 PM, Aurelien Jarno  wrote:
> On 2017-11-20 20:51, Debian Bug Tracking System wrote:
>> Processing commands for cont...@bugs.debian.org:
>>
>> > # match possible intention of reporter
>> > reassign 882223 glibc-doc
>> Bug #882223 [manpages-dev] Document security problems with system.3 and 
>> popen.3 (argument injection)
>> Bug reassigned from package 'manpages-dev' to 'glibc-doc'.
>> No longer marked as found in versions manpages/4.13-3.
>> Ignoring request to alter fixed versions of bug #882223 to the same values 
>> previously set
>> > thanks
>> Stopping processing here.
>
> Can you please point us to what has to be fixed on the glibc-doc side?
> The system.3 and popen.3 manpages are part of manpages-dev, not
> glibc-doc.

Online copy here:
https://www.gnu.org/software/libc/manual/html_node/Pipe-to-a-Subprocess.html#Pipe-to-a-Subprocess
https://www.gnu.org/software/libc/manual/html_node/Running-a-Command.html#index-system

Does not mention security problems...


https://www.gnu.org/software/libc/manual/html_node/Line-Input.html#index-gets
for instance mention security problem




> --
> Aurelien Jarno  GPG: 4096R/1DDD8C9B
> aurel...@aurel32.net http://www.aurel32.net

Processed: reassign 882223 to glibc-doc

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> # match possible intention of reporter
> reassign 882223 glibc-doc
Bug #882223 [manpages-dev] Document security problems with system.3 and popen.3 
(argument injection)
Bug reassigned from package 'manpages-dev' to 'glibc-doc'.
No longer marked as found in versions manpages/4.13-3.
Ignoring request to alter fixed versions of bug #882223 to the same values 
previously set
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
882223: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882223
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems