Your message dated Thu, 10 Nov 2016 13:49:11 +0200
with message-id 
<cahj_tlcbe84w69rgv9j1bu2mp2_n1-zr8ukc87gadpzorjt...@mail.gmail.com>
and subject line Re: [debian-mysql] Bug#815599: Bug#815599: 
mariadb-server-10.0: Postinstall script does not clear the 
mysql-server/root_password_again field
has caused the Debian Bug report #815599,
regarding mariadb-server-10.0: Postinstall script does not clear the  
mysql-server/root_password_again field
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
815599: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=815599
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: mariadb-server-10.0
Version: 10.0.23-0+deb8u1
Severity: minor

Dear Maintainer,

While looking to preseed some Jessie systems, I noticed that the 
mysql-server/root_password field had been cleared in the postinstall script, 
however the mysql-server/root_password_again field had not been. Therefore, the 
root password for the database, if not reset after installation, was available 
in cleartext from debconf.

-- System Information:
Debian Release: 8.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/24 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages mariadb-server-10.0 depends on:
ii  adduser                   3.113+nmu3
ii  debconf [debconf-2.0]     1.5.56
ii  libaio1                   0.3.110-1
ii  libc6                     2.19-18+deb8u3
ii  libdbi-perl               1.631-3+b1
ii  libpam0g                  1.1.8-3.1+deb8u1
ii  libstdc++6                4.9.2-10
ii  lsb-base                  4.1+Debian13+nmu1
ii  mariadb-client-10.0       10.0.23-0+deb8u1
ii  mariadb-common            10.0.23-0+deb8u1
ii  mariadb-server-core-10.0  10.0.23-0+deb8u1
ii  passwd                    1:4.2-3+deb8u1
ii  perl                      5.20.2-3+deb8u3
ii  psmisc                    22.21-2
ii  zlib1g                    1:1.2.8.dfsg-2+b1

Versions of packages mariadb-server-10.0 recommends:
ii  libhtml-template-perl  2.95-1

Versions of packages mariadb-server-10.0 suggests:
ii  bsd-mailx [mailx]  8.1.2-0.20141216cvs-2
pn  mariadb-test       <none>
pn  tinyca             <none>

-- debconf information:
* mysql-server/root_password_again: (password omitted)
* mysql-server/root_password: (password omitted)
  mariadb-server/oneway_migration: true
  mysql-server/password_mismatch:
  mysql-server/no_upgrade_when_using_ndb:
  mysql-server-10.0/postrm_remove_databases: false
  mysql-server-10.0/nis_warning:
  mariadb-server-10.0/really_downgrade: false
  mysql-server/error_setting_password:


--- End Message ---
--- Begin Message ---
The mariadb-10.0 package has been using unix socket auth for a while.
I don't think this issue needs any further actions.

--- End Message ---

Reply via email to