Package: monit
Version: 1:5.9-1
Severity: critical
Tags: upstream
Justification: causes serious data loss

   * What led up to the situation?

I upgraded a server from Debian 7 to Debian 8.1. Monit was configured to
monitor copy.com's CopyConsole and automatically start it at boot or and
restart it periodically. There was no problem on Debian 7. On Debian 8.1 I
found that directories created by CopyConsole were set with the executable bit
off. This caused CopyConsole to fail to copy data it should have copied. I was
able to recover from this but someone in different circumstances could lose
data.

Any software used to perform filesystem backups is at risk of losing data if it
is started by Monit 5.9 due to this problem.

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

I downloaded 1:5.14-2 from testing and installed it manually. This fixed the
problem.

The bug is documented upstream:

https://bitbucket.org/tildeslash/monit/issues/104

Reply via email to