Your message dated Tue, 14 Jan 2020 14:38:15 +0000
with message-id <e1irnkh-000ipa...@fasolo.debian.org>
and subject line Bug#941001: fixed in debian-edu-config 2.11.11
has caused the Debian Bug report #941001,
regarding [debian-edu-config] update-proxy-from-wpad clobbers apt.conf,
/etc/environment, etc. if run when network is down
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
941001: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=941001
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: debian-edu-config
Version: 2.11.1
Severity: important
If /usr/share/debian-edu-config/tools/update-proxy-from-wpad is run
while network is down, then the files it is supposed to modify get
clobbered, e.g.
``` /etc/apt/apt.conf
Acquire::http::Proxy "http://";;
Acquire::ftp::Proxy "http://";;
```
``` /etc/environment
http_proxy=http://
ftp_proxy=http://
https_proxy=http://
```
One can fix these files by running
/usr/share/debian-edu-config/tools/update-proxy-from-wpad when network
is available. But this does not happen automatically and needs to be
kicked off by hand.
Ideally, update-proxy-from-wpad would not do anything, if network is down.
Mike
--
DAS-NETZWERKTEAM
c\o Technik- und Ökologiezentrum Eckernförde
Mike Gabriel, Marienthaler str. 17, 24340 Eckernförde
mobile: +49 (1520) 1976 148
landline: +49 (4351) 850 8940
GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31
mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de
pgpwURI3dPZP3.pgp
Description: Digitale PGP-Signatur
--- End Message ---
--- Begin Message ---
Source: debian-edu-config
Source-Version: 2.11.11
We believe that the bug you reported is fixed in the latest version of
debian-edu-config, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 941...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Holger Levsen <hol...@debian.org> (supplier of updated debian-edu-config
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 14 Jan 2020 15:06:22 +0100
Source: debian-edu-config
Architecture: source
Version: 2.11.11
Distribution: unstable
Urgency: medium
Maintainer: Debian Edu Developers <debian-edu@lists.debian.org>
Changed-By: Holger Levsen <hol...@debian.org>
Closes: 941001
Changes:
debian-edu-config (2.11.11) unstable; urgency=medium
.
[ Dominik George ]
* Amend last changelog entry with CVE.
* debian/control: Reference Debian Edu in binary package description
* Follow-up for CVE-2019-3467:
- Add NEWS to warn administrators with possible local changes.
* Keep proxy settings on client if wpad is unreachable (Closes: #941001)
- Remove use of eval `...` while at it to minimise security risks
.
[ Holger Levsen ]
* Close #936375 in 2.11.7 changelog entry.
Checksums-Sha1:
60b302d199bb997f261d8bc4c7b2406d14176583 1923 debian-edu-config_2.11.11.dsc
f558af4fdf4b5de8a95080f5de98298347aeee5b 341044
debian-edu-config_2.11.11.tar.xz
f48cfaefae5a4a530bbba60f52a8945f453ed5fd 5460
debian-edu-config_2.11.11_source.buildinfo
Checksums-Sha256:
7f9d8b1aeed3fa257ae921bfb573c64c071ac5827c1b4e420edad26e73c846d5 1923
debian-edu-config_2.11.11.dsc
5b9b465ccca40dd11522f3633cef0096ca913557fe898b0d8b6588123452589a 341044
debian-edu-config_2.11.11.tar.xz
0d72779ca44907f40aa69efa770bd9bfbd522c71e27d6b50eb771bade2652003 5460
debian-edu-config_2.11.11_source.buildinfo
Files:
40b05bbcdb2afbfb5865bd0bb5387c46 1923 misc optional
debian-edu-config_2.11.11.dsc
43244a52844615f1b14efcced3ee3d72 341044 misc optional
debian-edu-config_2.11.11.tar.xz
d8e31ce5ffa2870f2cbc5c323fd42adc 5460 misc optional
debian-edu-config_2.11.11_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=cQXU
-----END PGP SIGNATURE-----
--- End Message ---
