GNU bug report logs - #27649
Update man-db to 2.7.6.1

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 27649 in the body.
You can then email your comments to 27649 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: guix-patches <at> gnu.org
Subject: Update man-db to 2.7.6.1
Date: Mon, 10 Jul 2017 21:43:07 -0400

[Message part 1 (text/plain, inline)]

This updates man-db to the latest release, 2.7.6.1.

I tested that the manual-database profile hook still works. For that, I
had to pass the new configuration option 'disable-cache-owner', or else
the test suite and manpage database generation would fail.

See this commit for more info (Separate cache owner from --enable-setuid
option):

https://git.savannah.gnu.org/cgit/man-db.git/commit/?id=0f8b5518949866075c25787bdc4e9c064597c21e

[0001-gnu-man-db-Update-to-2.7.6.1-fixes-CVE-2015-1336.patch (text/plain, attachment)]

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 27649 <at> debbugs.gnu.org (full text, mbox):

From: Marius Bakke <mbakke <at> fastmail.com>
To: Leo Famulari <leo <at> famulari.name>, 27649 <at> debbugs.gnu.org
Subject: Re: [bug#27649] Update man-db to 2.7.6.1
Date: Tue, 11 Jul 2017 22:53:18 +0200

[Message part 1 (text/plain, inline)]

Leo Famulari <leo <at> famulari.name> writes:

> This updates man-db to the latest release, 2.7.6.1.
>
> I tested that the manual-database profile hook still works. For that, I
> had to pass the new configuration option 'disable-cache-owner', or else
> the test suite and manpage database generation would fail.
>
> See this commit for more info (Separate cache owner from --enable-setuid
> option):
>
> https://git.savannah.gnu.org/cgit/man-db.git/commit/?id=0f8b5518949866075c25787bdc4e9c064597c21e

That commit message was confusingly familiar :-)

> From 0d04028ca5781b0ddeb2ae843a60934050c6f959 Mon Sep 17 00:00:00 2001
> From: Leo Famulari <leo <at> famulari.name>
> Date: Mon, 10 Jul 2017 15:04:58 -0400
> Subject: [PATCH] gnu: man-db: Update to 2.7.6.1 [fixes CVE-2015-1336].

[...]

> @@ -93,7 +93,12 @@ a flexible and convenient way.")
>               (xz    (assoc-ref %build-inputs "xz"))
>               (util  (assoc-ref %build-inputs "util-linux")))
>           ;; Invoke groff, less, gzip, bzip2, and xz directly from the store.
> -         (append (list "--disable-setuid" ;; Disable setuid man user.
> +         (append (list ;; Disable setuid man user.
> +                       "--disable-setuid"
> +                       ;; Don't constrain ownership of system-wide cache files.
> +                       ;; Otherwise creating the manpage database fails with
> +                       ;; with man-db > 2.7.5.

Double 'with'. I'm not even sure the second sentence is necessary, YMMV :-)

> +                       "--disable-cache-owner"

LGTM.

[signature.asc (application/pgp-signature, inline)]

Message #13 received at 27649-done <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Marius Bakke <mbakke <at> fastmail.com>
Cc: 27649-done <at> debbugs.gnu.org
Subject: Re: [bug#27649] Update man-db to 2.7.6.1
Date: Tue, 11 Jul 2017 22:54:29 -0400

[Message part 1 (text/plain, inline)]

On Tue, Jul 11, 2017 at 10:53:18PM +0200, Marius Bakke wrote:
> Leo Famulari <leo <at> famulari.name> writes:
> > +                       ;; Don't constrain ownership of system-wide cache files.
> > +                       ;; Otherwise creating the manpage database fails with
> > +                       ;; with man-db > 2.7.5.
> 
> Double 'with'. I'm not even sure the second sentence is necessary, YMMV :-)

It wasn't obvious to me that it should fail so I left it in, without
that extra 'with'.

Thanks for the review!

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.