Your message dated Tue, 18 Aug 2020 16:52:01 +0000
with message-id <[email protected]>
and subject line Bug#954175: fixed in resolvconf 1.84
has caused the Debian Bug report #954175,
regarding /sbin/resolvconf: unescaped "~*" causes spurious NSS lookups
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
954175: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=954175
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: resolvconf
Version: 1.79
Severity: normal
File: /sbin/resolvconf
Tags: patch

Dear Maintainer,

The /sbin/resolvconf shell script contains an unescaped ~* in a case statement
that results in a literal username lookup for "*". In some circumstances this
can cause a lot of log noise looking like this:

    nslcd[1234]: [801ee1] <passwd="*"> request denied by validnames option

See also bug #825317 which covers the same issue in another package.

The attached patch should correct this problem.


-- System Information:
Debian Release: 10.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-8-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages resolvconf depends on:
ii  debconf [debconf-2.0]  1.5.71
ii  ifupdown               0.8.35
ii  init-system-helpers    1.56+nmu1
ii  lsb-base               10.2019051400

resolvconf recommends no packages.

resolvconf suggests no packages.

-- debconf information excluded
--- /sbin/resolvconf.orig       2016-04-01 04:53:22.000000000 -0700
+++ /sbin/resolvconf    2020-03-16 23:28:44.972199996 -0700
@@ -34,7 +34,7 @@
          *" "*) report_iface_err "Space" ; exit 1 ;;
          .*) report_iface_err "Initial dot" ; exit 1 ;;
          -*) report_iface_err "Initial hyphen" ; exit 1 ;;
-         ~*) report_iface_err "Initial tilde" ; exit 1 ;;
+         \~*) report_iface_err "Initial tilde" ; exit 1 ;;
        esac
        ;;
   -u|--enable-updates|--disable-updates|--updates-are-enabled)

--- End Message ---
--- Begin Message ---
Source: resolvconf
Source-Version: 1.84
Done: Andrej Shadura <[email protected]>

We believe that the bug you reported is fixed in the latest version of
resolvconf, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andrej Shadura <[email protected]> (supplier of updated resolvconf package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 18 Aug 2020 18:40:14 +0200
Source: resolvconf
Architecture: source
Version: 1.84
Distribution: unstable
Urgency: medium
Maintainer: resolvconf team <[email protected]>
Changed-By: Andrej Shadura <[email protected]>
Closes: 954175
Changes:
 resolvconf (1.84) unstable; urgency=medium
 .
   [ Rob Leslie ]
   * Escape "~*" to prevent spurious NSS lookups (Closes: #954175)
Checksums-Sha1:
 508a120b6bdd7efa273c023ff5a47dd0bbd5f2f5 1483 resolvconf_1.84.dsc
 992313d784873dc2884394e0135857ff77209bdb 73156 resolvconf_1.84.tar.xz
Checksums-Sha256:
 340f0fc0fe1a501058d51505abfe7d3813ac97b79c707fc8e5774f96995d0298 1483 
resolvconf_1.84.dsc
 78142bbd3bde8a18fec8456ee1e058c6e6f7bbe4f3c6f626f05d57a013e01fe8 73156 
resolvconf_1.84.tar.xz
Files:
 7890d94442723aeb000c836d3e854828 1483 net optional resolvconf_1.84.dsc
 2ddf0d11bc0d21408581b46b2e3076a9 73156 net optional resolvconf_1.84.tar.xz

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEeuS9ZL8A0js0NGiOXkCM2RzYOdIFAl88BJsACgkQXkCM2RzY
OdJUTgf+JZeXQRNhBhX96xGhsgKrtNxOZpyx1cX4uxAdC62829OtY+tM6ixctzcO
POBNYIAbGtwzM+puh0O6iaL605E8hFScE9XwDQYNAQ9Dg0pYsHptCfItB0hRmht2
SgjZbY61aTeWjuAM+9r+gC0zMjG2kG8NnzA0xaUTAn51Gvcx7yUFp8j37Dbwq9Ex
uu8uaHf8K7NXrnkQoIjwVsy9CZTQ4TklRpYKekwoedrLdUqAInoGcNQFquz8X19L
zejXrbHZTcXnv300Kqeh1nRgmcTN52k7P2TH9pKCMpBZMKyybHoRinOOlmORbdI3
JnZDQZkOAovBwkbVcdS9AtJfrdy33Q==
=+ar5
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to