Package: keepalived
Version: 1:2.0.10-1
Severity: important
Tags: patch upstream
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hey!
With a configuration like this:
vrrp_script check_vpn1 {
script "/usr/sbin/birdc -v show proto vpn1 | grep -q '^1002-.* up .*'"
interval 1
}
The script is executed with execve() instead of system(). This is
fixed in Keepalived 2.0.17 with this commit:
https://github.com/acassen/keepalived/commit/3487882b11c8701d8ab0132e1053a608b3fec1a0
The bug has been introduced in 2.0.0 when keeplived started not using
system() when not needed.
Could this patch be included in the next point release?
Thanks.
- -- System Information:
Debian Release: 10.0
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'unstable'), (101,
'experimental-debug'), (101, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_USER, TAINT_WARN, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8), LANGUAGE=en_US:en
(charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages keepalived depends on:
ii iproute2 4.20.0-2
ii libc6 2.28-10
ii libglib2.0-0 2.58.3-2
ii libip4tc0 1.8.2-4
ii libip6tc0 1.8.2-4
ii libjson-c3 0.12.1+ds-2
ii libnl-3-200 3.4.0-1
ii libnl-genl-3-200 3.4.0-1
ii libsnmp30 5.7.3+dfsg-5
ii libssl1.1 1.1.1c-1
ii libxtables12 1.8.2-4
Versions of packages keepalived recommends:
ii ipvsadm 1:1.29-1
keepalived suggests no packages.
- -- no debconf information
-----BEGIN PGP SIGNATURE-----
iQJGBAEBCAAwFiEErvI0h2bzccaJpzYAlaQv6DU1JfkFAl0jE3ASHGJlcm5hdEBk
ZWJpYW4ub3JnAAoJEJWkL+g1NSX5ve4P/Apv3gUco0MkFKN2jtiCLwoFKHg66GPQ
fAsNu48GXEHUoMO2s8HXbQnZ0uxcYZjHm1UNqy2hPojB5b30z5QxtNXwGAcZC2B2
jKGG7BTFXtD0+B9AChA3FDdx/WdyA1t395EAbEMaKv+m/iNHIeRdEpxmZ7VRIpyE
pRp6YT3fktrmaYPdcT5Nozesx1bN4zveXyej1r/es133bB+AGHC7oNUDtWLsJS1t
GRmuxnFIvNxjbiw8NnWXSNu0zAuvMW+7s/qel0ogKLstapv0SnIgVI7fZRecORAp
ISGBAa5Dh3NSRTYhW2S89p0HAmuFXnwN7PTekefo1zw+EBl2vvVsaEUSE+DPEBpq
sj2GpDevMxK2tB7DifUnD1eUUsaiPAba7UDkMo7rnvukT9MH0JNC4/i0X6HIlNnu
zcof2+jg785/mU5qM3WBG9eBbvjkhA6P5Eo1951DHxf9JyOIYTxcNWn13zfbHAFO
H13fb41aQKvDmkYhuBuh/ry9HeRCaxpUOie07Gbx3EemFnTTM+9kylxYEvGNMA4k
ntwxGytHxbLohoC2TrGo8Vwz98xqYOXq6xsGp9YwrQXPmDdmuUoWnjnWCv4Vf2IX
xBaZgvOt0IPTNwxSxtYoE6nujmx5Z2TySElzLJEY4mQOApOn0SoLbiNYCig3qfjI
qrAxDhHPe7wa
=8Vz0
-----END PGP SIGNATURE-----
