Package: smartmontools
Version: 6.3+svn4002-2+b2
Severity: important
Tags: patch

Dear Maintainer,

Note the following error output:

$ sudo update-smart-drivedb 
/var/lib/smartmontools/drivedb/drivedb.h.error: rejected by /usr/sbin/smartctl, 
probably no longer compatible

$ cat /var/lib/smartmontools/drivedb/drivedb.h.error
<html>
 <head>
  <title>302 Found</title>
 </head>
 <body>
  <h1>302 Found</h1>
  The resource was found at <a 
href="https://sourceforge.net/p/smartmontools/code/HEAD/tree/branches/RELEASE_6_4_DRIVEDB/smartmontools/drivedb.h?format=raw";>https://sourceforge.net/p/smartmontools/code/HEAD/tree/branches/RELEASE_6_4_DRIVEDB/smartmontools/drivedb.h?format=raw</a>;
you should be redirected automatically.


 </body>
</html>



I have attached a patch to fix this, however the bug report has a comment 
mentioning that 
update-smart-drivedb is a security risk and has been dropped in releases above 
the current 
stable (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=824149#10). I am 
therefor 
requesting the feature either be fixed in stable (whichever patch works best) 
or it be 
removed from the stable package for being a security risk.

Konomi


-- System Information:
Debian Release: 8.7
  APT prefers stable
  APT policy: (650, 'stable'), (550, 'testing'), (100, 'unstable'), (50, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages smartmontools depends on:
ii  debianutils          4.4+b1
ii  init-system-helpers  1.22
ii  libc6                2.19-18+deb8u7
ii  libcap-ng0           0.7.4-2
ii  libgcc1              1:4.9.2-10
ii  libselinux1          2.3-2
ii  libstdc++6           4.9.2-10
ii  lsb-base             4.1+Debian13+nmu1

Versions of packages smartmontools recommends:
ii  bsd-mailx [mailx]  8.1.2-0.20141216cvs-2

Versions of packages smartmontools suggests:
ii  gsmartcontrol   0.8.7-1.1
ii  smart-notifier  0.28-5

-- Configuration Files:
/etc/smartd.conf changed [not included]

-- no debconf information
--- a/update-smart-drivedb	2017-02-03 23:08:14.474323109 +1100
+++ b/update-smart-drivedb	2017-02-03 23:10:00.358327135 +1100
@@ -40,7 +40,7 @@
 SMARTCTL="$sbindir/smartctl"
 
 # Download URL for sourceforge code browser
-SRCEXPR='http://sourceforge.net/p/smartmontools/code/HEAD/tree/$location/smartmontools/drivedb.h?format=raw'
+SRCEXPR='https://www.smartmontools.org/export/HEAD/$location/smartmontools/drivedb.h'
 
 # Parse options
 q="-q "

Reply via email to