On Sat, Nov 21, 2020 at 09:50:53AM +0000, Chris Lamb wrote:
> Source: minidlna
> Version: 1.2.1+dfsg-2
> Severity: serious
> Tags: patch
> 
> Hi,
> 
> Purging the package currently fails with the following error:
> 
>   Purging configuration files for minidlna (1.2.1+dfsg-2) ...
>   rm: cannot remove '/var/log/minidlna': Is a directory
>   dpkg: error processing package minidlna (--purge):
>    installed minidlna package post-removal script subprocess returned error 
> exit status 1
>   Errors were encountered while processing:
>    minidlna
>   E: Sub-process /usr/bin/dpkg returned an error code (1)
> 
> Patch attached.
>...
> --- a/debian/minidlna.postrm
> +++ b/debian/minidlna.postrm
> @@ -5,8 +5,8 @@ set -e
>  
>  case "$1" in
>      purge)
> -     rm -rf /var/cache/minidlna
> -        rm -f /var/log/minidlna.log* /var/log/minidlna
> +     rm -rf /var/cache/minidlna /var/log/minidlna
> +        rm -f /var/log/minidlna.log*
>          ;;
>  
>      remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)

Hi Alexander,

this is a regression in 1.2.1+dfsg-2 that is currently in both 
buster-security (which was done on top of 1.2.1+dfsg-2 that introduced 
the regression, not on top of 1.2.1+dfsg-1 in buster) and in 
unstable/testing (which currently misses the CVE fixes).

It would be good if you could make an upload to unstable with this bug 
fixed on top of 1.2.1+dfsg-2+deb10u1, and then backport that change to 
buster.

Please coordinate with the security team whether this would warrant a 
regression update to the DSA or should be done through the next point 
release.

Thanks
Adrian

Reply via email to