control: reassign -1 glibc-doc-reference control: severity -1 normal On 2017-11-21 12:38, Bastien ROUCARIES wrote: > On Mon, Nov 20, 2017 at 10:14 PM, Aurelien Jarno <aurel...@aurel32.net> wrote: > > On 2017-11-20 20:51, Debian Bug Tracking System wrote: > >> Processing commands for cont...@bugs.debian.org: > >> > >> > # match possible intention of reporter > >> > reassign 882223 glibc-doc > >> Bug #882223 [manpages-dev] Document security problems with system.3 and > >> popen.3 (argument injection) > >> Bug reassigned from package 'manpages-dev' to 'glibc-doc'. > >> No longer marked as found in versions manpages/4.13-3. > >> Ignoring request to alter fixed versions of bug #882223 to the same values > >> previously set > >> > thanks > >> Stopping processing here. > > > > Can you please point us to what has to be fixed on the glibc-doc side? > > The system.3 and popen.3 manpages are part of manpages-dev, not > > glibc-doc. > > Online copy here: > https://www.gnu.org/software/libc/manual/html_node/Pipe-to-a-Subprocess.html#Pipe-to-a-Subprocess > https://www.gnu.org/software/libc/manual/html_node/Running-a-Command.html#index-system > > Does not mention security problems... > > > https://www.gnu.org/software/libc/manual/html_node/Line-Input.html#index-gets > for instance mention security problem
This manual is non-free, so it's clearly not glibc-doc, but glibc-doc-reference. Please check the content of packages before reporting bug, also please avoid abusing severity even if you are upset by the issue. Patches are welcome. -- Aurelien Jarno GPG: 4096R/1DDD8C9B aurel...@aurel32.net http://www.aurel32.net
