Package: libgssapi-krb5-2
Version: 1.18.3-4
Severity: important
Tags: patch
User: debian...@lists.debian.org
Usertags: piuparts
libgssapi-krb5-2 does not properly clean up the obsolete 'conffile'
/etc/gss/mech.d/README on upgrades. The file was shipped in stretch
but is not removed on upgrades to buster (or later to bullseye).
This breaks piuparts tests of the upgrade path oldstable -> stable ->
testing because libgssapi-krb5-2 is part of the base system in bullseye
and depending on whether libgssapi-krb5-2 was pulled in as dependency
in stretch, piuparts will complain about the state of
/etc/gss/mech.d/README
While I could work around this ... I'd prefer to see this fixed properly
in bullseye, please apply the attached patch.
Andreas
>From ee77e275cdca4542e4b01bcaedbf2e1dfa0c4212 Mon Sep 17 00:00:00 2001
From: Andreas Beckmann <a...@debian.org>
Date: Sun, 21 Mar 2021 00:42:43 +0100
Subject: [PATCH] properly dispose of /etc/gss/mech.d/README
---
debian/changelog | 12 ++++++++----
debian/libgssapi-krb5-2.maintscript | 1 +
debian/libgssapi-krb5-2.postrm | 9 ---------
3 files changed, 9 insertions(+), 13 deletions(-)
create mode 100644 debian/libgssapi-krb5-2.maintscript
delete mode 100644 debian/libgssapi-krb5-2.postrm
diff --git a/debian/changelog b/debian/changelog
index e7224b125..d5e18f7eb 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,11 @@
-krb5 (1.18.3-4) unstable; urgency=medium
+krb5 (1.18.3-5) UNRELEASED; urgency=medium
+
+ * Use dpkg-maintscript-helper rm_conffile to properly dispose of
+ /etc/gss/mech.d/README. (Closes: #xxxxxx)
+
+ -- Andreas Beckmann <a...@debian.org> Sun, 21 Mar 2021 00:39:12 +0100
+krb5 (1.18.3-4) unstable; urgency=medium
* Sigh, either use <= with the old version in the
libapache-mod-auth-kerb constraint or << with the new version. <=
@@ -40,7 +46,7 @@ krb5 (1.18.2-1) experimental; urgency=medium
- Fix input length checking in SPNEGO DER decoding
- Set lockdown attribute when creating LDAP KDB
- Add recursion limit for ASN.1 indefinite lengths (CVE-2020-28196,
- Closes: #973880)
+ Closes: #973880)
* Release new upstream to experimental
-- Sam Hartman <hartm...@debian.org> Mon, 09 Nov 2020 16:28:52 -0500
@@ -2699,5 +2705,3 @@ krb5 (1.2.1-1) unstable; urgency=low
* Initial Release.
-- Sam Hartman <hartm...@permabit.com> Thu, 19 Oct 2000 16:05:06 -0400
-
-
diff --git a/debian/libgssapi-krb5-2.maintscript
b/debian/libgssapi-krb5-2.maintscript
new file mode 100644
index 000000000..0044c9b6b
--- /dev/null
+++ b/debian/libgssapi-krb5-2.maintscript
@@ -0,0 +1 @@
+rm_conffile /etc/gss/mech.d/README 1.18.3-5~
diff --git a/debian/libgssapi-krb5-2.postrm b/debian/libgssapi-krb5-2.postrm
deleted file mode 100644
index 95b5e7245..000000000
--- a/debian/libgssapi-krb5-2.postrm
+++ /dev/null
@@ -1,9 +0,0 @@
-#!/bin/sh
-
-set -e
-
-if [ $1 = "purge" ] ; then
- rm -f /etc/gss/mech.d/README 2>/dev/null
-fi
-
-#DEBHELPER#
--
2.20.1
