Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #61663

Bug#902936: fixed in zutils 1.7-2

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Control: tag -1 - moreinfo
Control: unmerge -1
Control: reassign -1 zutils
Control: clone -1 -2
Control: retitle -1 zutils installs an incompatible replacement for GNU zcat
Control: close -1 1.7-2
Control: retitle -2 Double-free when using zutils zcat -t on some input
Control: severity -2 important
Control: tag -2 security

On Sat, 2018-07-28 at 11:21 +0200, Daniel Baumann wrote:
> On 07/28/2018 11:05 AM, Ben Hutchings wrote:
> > >    * Skipping zcat for now (Closes: #902936, #903931).
> > 
> > [...]
> > 
> > But you didn't actually do that.
> 
> when installing zutils 1.7-2, /bin/zcat remains untouched. can you
> please elaborate why you think i "didn't actually do that"?

Sorry, I looked at the file list on packages.debian.org which turns out
to be stale even though it's showing the current version number.

> > And now you've reassigned this back to initramfs-tools with no
> > explanation.
> 
> did you see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903931#47
> and following?

It didn't show up on this bug's message log because you didn't write
the control commands properly.

So, you conveyed the upstream author's explanation, but it doesn't
answer why it's OK to install that version of zcat as a replacement for
GNU zcat.  I'm sure some people like to have all the cat options when
using zcat interactively, but it is also used programmatically and
probably not only by initramfs-tools.  You seem to have accepted that
and fixed it, so I don't know why you then assigned the bug back.

The double-free bug in zutils zcat is presumably still unfixed, so I'm
cloning a separate bug for that.

I'm leaving #903931 assigned to initramfs-tools since I might as well
work around the zcat incompatibility.  But please don't take it as a
cue to revert the change in zutils, when that is closed.

Ben.

-- 
Ben Hutchings
The two most common things in the universe are hydrogen and stupidity.

Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#902936: fixed in zutils 1.7-2 Ben Hutchings <ben@decadent.org.uk> - 2018-07-28 11:10 +0200
  Processed: Re: Bug#902936: fixed in zutils 1.7-2 "Debian Bug Tracking System" <owner@bugs.debian.org> - 2018-07-28 11:10 +0200
  Bug#902936: fixed in zutils 1.7-2 Daniel Baumann <daniel.baumann@progress-linux.org> - 2018-07-28 11:30 +0200
    Bug#902936: fixed in zutils 1.7-2 Ben Hutchings <ben@decadent.org.uk> - 2018-07-28 12:10 +0200
      Processed: Re: Bug#902936: fixed in zutils 1.7-2 "Debian Bug Tracking System" <owner@bugs.debian.org> - 2018-07-28 12:10 +0200

csiph-web