severity #611088 critical thanks Indeed, this is critical
Am 25.01.2011 15:10, schrieb Thomas Liske: > Package: apt-dater-host > Version: 0.8.4-2 > Severity: important > Tags: upstream patch > > > Hi, > > this bug is related to SF Bug#3158198 reported by Mathieu PARENT: > > apt-dater-host does silently ignore any ABI-incompatible updates (like > bind9). Users of apt-dater might think that their hosts are up to date while > they are missing important security fixes (i.e. recent bind9 updates). > > There is a simple patch to solve this issue: > > =================================================================== > --- apt-dater-host/trunk/debian/apt-dater-host 2011-01-21 08:51:02 UTC (rev > 543) > +++ apt-dater-host/trunk/debian/apt-dater-host 2011-01-21 08:57:45 UTC (rev > 544) > @@ -191,8 +191,8 @@ > $DPKGARGS = "--quiet --simulate --fix-broken --allow-unauthenticated"; > } > > - unless(open(HAPT, "$_GETROOT $DPKGTOOL $DPKGARGS upgrade |")) { > - print "\nADPERR: Failed to execute '$_GETROOT $DPKGTOOL $DPKGARGS > upgrade' ($!).\n"; > + unless(open(HAPT, "$_GETROOT $DPKGTOOL $DPKGARGS dist-upgrade |")) { > + print "\nADPERR: Failed to execute '$_GETROOT $DPKGTOOL $DPKGARGS > dist-upgrade' ($!).\n"; > exit(1); > } > while(<HAPT>) { > @@ -224,7 +224,7 @@ > } > close(HAPT); > if($?) { > - print "\nADPERR: Error executing '$GETROOT $DPKGTOOL $DPKGARGS > upgrade' ($?).\n"; > + print "\nADPERR: Error executing '$GETROOT $DPKGTOOL $DPKGARGS > dist-upgrade' ($?).\n"; > exit(1); > } > > > HTH, > Thomas > > -- System Information: > Debian Release: 6.0 > APT prefers testing > APT policy: (500, 'testing') > Architecture: amd64 (x86_64) > > Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores) > Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) > Shell: /bin/sh linked to /bin/dash > > Versions of packages apt-dater-host depends on: > ii debconf [debconf-2.0] 1.5.36 Debian configuration management > sy > ii libapt-pkg-perl 0.1.24+b1 Perl interface to libapt-pkg > ii lsb-release 3.2-23.2squeeze1 Linux Standard Base version > report > ii openssh-server 1:5.5p1-6 secure shell (SSH) server, for > sec > ii perl 5.10.1-17 Larry Wall's Practical > Extraction > > Versions of packages apt-dater-host recommends: > ii aptitude 0.6.3-3.2 terminal-based package manager > (te > ii imvirt 0.9.1-pre1 I'm virtualized? > ii sudo 1.7.4p4-2 Provide limited super user > privile > > apt-dater-host suggests no packages. > > -- Configuration Files: > /etc/apt-dater-host.conf changed [not included] > > -- debconf information excluded > > -- /* Mit freundlichem Gruß / With kind regards, Patrick Matthäi GNU/Linux Debian Developer E-Mail: pmatth...@debian.org patr...@linux-dev.org Comment: Always if we think we are right, we were maybe wrong. */
signature.asc
Description: OpenPGP digital signature