Your message dated Sun, 27 Jan 2019 15:46:15 -0800
with message-id <20190127234615.ga103...@google.com>
and subject line Re: Please convert all scripts to not use bash
has caused the Debian Bug report #762918,
regarding Please convert all scripts to not use bash
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
762918: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=762918
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Package: xz-utils
Version: 5.1.1alpha+20120614-2
Severity: grave
Please convert all scripts (xzdiff, xzless, ...) to use /bin/sh as shell
and not /bin/bash. Most of them (as I checked) do not use any special
bash syntax anyway so there is no need to use bash.
I made this a grave bug as it is security relevant due the current bash
bugs and against the debian policy to use /bin/sh if possible.
- -- System Information:
Debian Release: jessie/sid
APT prefers unstable
APT policy: (800, 'unstable'), (110, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.15.10 (SMP w/8 CPU cores)
Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1) (ignored: LC_ALL set to
de_DE)
Shell: /bin/sh linked to /bin/dash
Versions of packages xz-utils depends on:
ii libc6 2.19-11
ii liblzma5 5.1.1alpha+20120614-2
xz-utils recommends no packages.
xz-utils suggests no packages.
- -- no debconf information
- --
Klaus Ethgen http://www.ethgen.ch/
pub 4096R/4E20AF1C 2011-05-16 Klaus Ethgen <kl...@ethgen.de>
Fingerprint: 85D4 CA42 952C 949B 1753 62B3 79D0 B06F 4E20 AF1C
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=YYRl
-----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---
Version: 5.2.2-1.3
Hi Klaus,
In September, 2014, Klaus Ethgen wrote:
> Please convert all scripts (xzdiff, xzless, ...) to use /bin/sh as shell
> and not /bin/bash. Most of them (as I checked) do not use any special
> bash syntax anyway so there is no need to use bash.
This was a packaging bug --- the intent was to use an arbitrary POSIX
shell (hence /bin/sh) all along. Fixed by Ximin Luo in 5.2.2-1.3
(thanks!).
Thanks for reporting, and sorry for the slow reply.
--- End Message ---
