Hi!

Bug #1112281 (severity grave) The Null terminator in log messages from
zsnapd-rcmd via python3-magcode-core causes zsnapd to fail to do backups
over ssh.  Python 13 syslog.syslog() throws a 'ValueError: embedded null
character" exception from inside the built in libc syslog handler.  This
bug broke ZFS zfs recieve security processing in a fail safe way...

I almost lost all my VM and other backups because of this...  It completely
broke the ssh zsnapd-rcmd security pipeline for ZFS send receive
(zsnapd-rcmd from /root/.ssh/authorized_keys uses ssh SSH_ORIGINAL_COMMAND
environment variable to filter zfs receive command arguments using regexps
before doing execve() for the received command).

Could the package python3-magcode-core in unstable please be included in
Debian 13.1 point release?

Thank you!

Matt Grant
--
Debian Developer

Reply via email to