[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#987266: marked as done (preinst check for kernel release > 255 may no longer be needed)

Your message dated Sat, 19 Mar 2022 10:02:09 +0000
with message-id <E1nVVuT-0002u0-TU@fasolo.debian.org>
and subject line Bug#987266: fixed in glibc 2.31-13+deb11u3
has caused the Debian Bug report #987266,
regarding preinst check for kernel release > 255 may no longer be needed
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
987266: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987266
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: libc6
Version: 2.31-11
Severity: normal

Hi,

due to https://salsa.debian.org/glibc-team/glibc/-/commit/6ddfa57577af0d96df9ddd7be401f5ce9a9bcc0f (a commit from 2004) the preinst script for glibc checks whether the "z" in the "x.y.z" of the kernel version is less than 255. If yes, the package refuses to install.

I hit this problem on a box with a custom 4.9.266 kernel.

Based on this lkml thread: https://lore.kernel.org/lkml/7pR0YCctzN9phpuEChlL7_SS6auHOM80bZBcGBTZPuMkc6XjKw7HUXf9vZUPi-IaV2gTtsRVXgywQbja8xpzjGRDGWJsVYSGQN5sNuX1yaQ=@protonmail.com/T/, the check is no longer needed because the kernel caps the version code it reports to 255, even if uname prints a higher number.

Of course, you could conceivably still hit the problem with earlier kernels, so I suppose the logic of the check should be modified, not removed entirely, to be technically correct.

If forced at gunpoint to make a guess, I would guess, though, that removing the check would have very little actual impact; it also doesn't protect the user from installing a kernel with an unsupported version number after having installed glibc.

Best regards,

András

-- 
     A ham sandwich is better than nothing. Nothing is better than eternal
         happiness. So a ham sandwich is better than eternal happiness.

--- End Message ---
--- Begin Message --- 
Source: glibc
Source-Version: 2.31-13+deb11u3
Done: Aurelien Jarno <aurel32@debian.org>

We believe that the bug you reported is fixed in the latest version of
glibc, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 987266@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Aurelien Jarno <aurel32@debian.org> (supplier of updated glibc package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 17 Mar 2022 22:37:00 +0100
Source: glibc
Architecture: source
Version: 2.31-13+deb11u3
Distribution: bullseye
Urgency: medium
Maintainer: GNU Libc Maintainers <debian-glibc@lists.debian.org>
Changed-By: Aurelien Jarno <aurel32@debian.org>
Closes: 987266 989147 998008 998622 1004861
Changes:
 glibc (2.31-13+deb11u3) bullseye; urgency=medium
 .
   [ Aurelien Jarno ]
   * debian/patches/git-updates.diff: update from upstream stable branch:
     - Fix bad conversion from ISO-2022-JP-3 with iconv (CVE-2021-43396).
       Closes: #998622.
     - Remove PIE check on amd64 to fix FTBFS with binutils 2.37.
     - Fix a buffer overflow in sunrpc svcunix_create (CVE-2022-23218).
     - Fix a buffer overflow in sunrpc clnt_create (CVE-2022-23219).
   * debian/debhelper.in/libc-bin.postinst: stop replacing older versions from
     /etc/nsswitch.conf.  Closes: #998008.
   * debian/debhelper.in/libc.preinst: simplify the version comparison by only
     comparing the two first parts, now that kernel 2.X are not supported
     anymore.  Closes: #1004861.
   * debian/debhelper.in/libc.preinst: drop the check for kernel release > 255
     now that glibc and preinstall script are fixed.  Closes: #987266.
   * debian/patches/local-CVE-2021-33574-mq_notify-use-after-free.diff:
     fix a possible use-after-free in mq_notify (CVE-2021-33574).  Closes:
     #989147.
Checksums-Sha1:
 fdc75bac6fd6f430366dae36fd7807aefb2fc46d 8347 glibc_2.31-13+deb11u3.dsc
 b95746511969a1071f03c7a79855dfd4181f4238 916044 glibc_2.31-13+deb11u3.debian.tar.xz
 8311b1881f16eb90968469c7b26d445ace889426 8907 glibc_2.31-13+deb11u3_source.buildinfo
Checksums-Sha256:
 1a8c389b5664962dda78e289d6938a2276b8b450d41e3081e7bf82db2fe1e409 8347 glibc_2.31-13+deb11u3.dsc
 1accd7015160a589e8ad1111011fa9c911a572e673aa5689b99f64ce6740226c 916044 glibc_2.31-13+deb11u3.debian.tar.xz
 f828487f38283f566b310deb099466d5a5979faef6944d021c23a8503c6735b2 8907 glibc_2.31-13+deb11u3_source.buildinfo
Files:
 2cd4f1126a06d943b2b56256ef7d4294 8347 libs required glibc_2.31-13+deb11u3.dsc
 8a4a07322785138fbd85c61134702e25 916044 libs required glibc_2.31-13+deb11u3.debian.tar.xz
 2a048422f04673d3c7cf746f7593e7e7 8907 libs required glibc_2.31-13+deb11u3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=pu7d
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: