Your message dated Sat, 14 Jun 2014 11:20:17 +0000 with message-id <e1wvm0p-0002tz...@franck.debian.org> and subject line Bug#746327: fixed in packagekit 0.8.17-3 has caused the Debian Bug report #746327, regarding packagekit: installs a file in /var in the .deb and modifies it at runtime (/var/lib/PackageKit/transactions.db) to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 746327: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746327 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: packagekit Version: 0.8.17-2 Severity: serious I got a warning from debsums that the transactions database had been modified. Packages should not modify files shipped in the deb. Below is the diff of the sqlite3 .dump of the original file from the deb and the file on my filesystem. Clearly this database should be created at runtime by the packagekit daemon instead of shipped in the package. /etc/cron.monthly/debsums: /var/lib/PackageKit/transactions.db pabs@chianamo ~ $ cat diff --- 1 2014-04-29 09:30:51.008978665 +0800 +++ 2 2014-04-29 09:28:58.417555803 +0800 @@ -1,7 +1,17 @@ PRAGMA foreign_keys=OFF; BEGIN TRANSACTION; CREATE TABLE transactions (transaction_id TEXT PRIMARY KEY, timespec TEXT, duration INTEGER, succeeded INTEGER DEFAULT 0, role TEXT, data TEXT, description TEXT, uid INTEGER DEFAULT 0, cmdline TEXT); +INSERT INTO "transactions" VALUES('/3_babcaecb','2014-04-24T07:36:19.575219Z',10007,0,'update-packages',NULL,NULL,1000,NULL); +INSERT INTO "transactions" VALUES('/3_ecdebcea','2014-04-25T08:36:21.601458Z',1679,1,'update-packages',NULL,NULL,1000,NULL); +INSERT INTO "transactions" VALUES('/3_bdcbccdd','2014-04-26T09:36:18.783232Z',757,1,'update-packages',NULL,NULL,1000,NULL); +INSERT INTO "transactions" VALUES('/3_ecdabebc','2014-04-27T12:52:55.648922Z',12199,1,'update-packages','downloading network-manager-dbg;0.9.8.8-7;amd64;testing network management framework (debugging symbols) +downloading network-manager;0.9.8.8-7;amd64;testing network management framework (daemon and userspace tools)',NULL,1000,NULL); +INSERT INTO "transactions" VALUES('/3_bddeaeab','2014-04-28T13:42:47.881452Z',639,1,'update-packages',NULL,NULL,1000,NULL); CREATE TABLE last_action (role TEXT PRIMARY KEY, timespec TEXT); +INSERT INTO "last_action" VALUES('get-updates','2014-04-28T13:42:47.852767Z'); +INSERT INTO "last_action" VALUES('update-packages','2014-04-28T13:42:48.523333Z'); CREATE TABLE config (key TEXT PRIMARY KEY, value TEXT); CREATE TABLE proxy (created TEXT, proxy_http TEXT, proxy_https TEXT, proxy_ftp TEXT, proxy_socks TEXT, no_proxy TEXT, pac TEXT, uid INTEGER, session TEXT); +INSERT INTO "proxy" VALUES('2014-04-21T05:58:30.493843Z',NULL,'',NULL,'','','',1000,'/org/freedesktop/logind/session-2'); +INSERT INTO "proxy" VALUES('2014-04-27T12:42:41.215312Z',NULL,'',NULL,'','','',1000,'/org/freedesktop/logind/session-4'); COMMIT; -- System Information: Debian Release: jessie/sid APT prefers testing APT policy: (900, 'testing'), (800, 'unstable'), (700, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 3.13-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages packagekit depends on: ii libc6 2.18-4 ii libglib2.0-0 2.40.0-2 ii libglib2.0-bin 2.40.0-2 ii libpackagekit-glib2-16 0.8.17-2 ii libpolkit-gobject-1-0 0.105-4 ii libsqlite3-0 3.8.4.3-1 ii libsystemd-journal0 204-8 ii libsystemd-login0 204-8 ii packagekit-backend-aptcc 0.8.17-2 ii policykit-1 0.105-4 Versions of packages packagekit recommends: pn packagekit-tools <none> Versions of packages packagekit suggests: pn packagekit-backend-smart <none> -- debsums errors found: debsums: changed file /var/lib/PackageKit/transactions.db (from packagekit package) -- bye, pabs http://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part
--- End Message ---
--- Begin Message ---Source: packagekit Source-Version: 0.8.17-3 We believe that the bug you reported is fixed in the latest version of packagekit, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 746...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Matthias Klumpp <m...@debian.org> (supplier of updated packagekit package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sat, 14 Jun 2014 12:34:04 +0200 Source: packagekit Binary: packagekit packagekit-tools packagekit-docs libpackagekit-glib2-16 libpackagekit-glib2-dev gir1.2-packagekitglib-1.0 packagekit-gtk3-module gstreamer0.10-packagekit browser-plugin-packagekit python3-packagekit packagekit-backend-aptcc packagekit-backend-smart packagekit-dbg Architecture: source amd64 all Version: 0.8.17-3 Distribution: unstable Urgency: medium Maintainer: Matthias Klumpp <m...@debian.org> Changed-By: Matthias Klumpp <m...@debian.org> Description: browser-plugin-packagekit - Plugin to install missing plugins using PackageKit gir1.2-packagekitglib-1.0 - GObject introspection data for the PackageKit GLib library gstreamer0.10-packagekit - GStreamer plugin to install codecs using PackageKit libpackagekit-glib2-16 - Library for accessing PackageKit using GLib libpackagekit-glib2-dev - Library for accessing PackageKit using GLib (development files) packagekit - Provides a package management service packagekit-backend-aptcc - APT backend for PackageKit packagekit-backend-smart - Smart backend for PackageKit packagekit-dbg - Debugging symbols for PackageKit packagekit-docs - Documentation for PackageKit packagekit-gtk3-module - Install fonts automatically using PackageKit packagekit-tools - Provides PackageKit command-line tools python3-packagekit - PackageKit backend Python bindings Closes: 746327 Changes: packagekit (0.8.17-3) unstable; urgency=medium . * Don't ship transactions.db (Closes: #746327) * tdb-permissions.patch: Update permissions on the transactions db * Replace xulrunner-dev build-dep with dependency on iceweasel-dev Checksums-Sha1: e52fb002b90ed3e5c1a35d9e0bf38415623ba083 3442 packagekit_0.8.17-3.dsc 310d7676cc38f6efcc0b659eb1a7dcfc5f036671 21524 packagekit_0.8.17-3.debian.tar.xz d2f5fe6059e3568d66be2fb5c3624963d920db16 459296 packagekit_0.8.17-3_amd64.deb 463efd89ba24a6463f9d0b4a6d97b941eb5dbf7e 50962 packagekit-tools_0.8.17-3_amd64.deb 4b1d5428074d7b9fbfbe474c5cf19edc5a37dec7 380760 packagekit-docs_0.8.17-3_all.deb c039e1213ab521982148e1cee01ba0d6a0cea3bd 111626 libpackagekit-glib2-16_0.8.17-3_amd64.deb f99d563b5f09395e6acd9f3e045cf78c409fdabc 70762 libpackagekit-glib2-dev_0.8.17-3_amd64.deb f638fa0e0b03d735cedc4bf51fadffa4d7d29e8a 37736 gir1.2-packagekitglib-1.0_0.8.17-3_amd64.deb 413676b1557f38b61fb9b39c2c921eb155c60113 19484 packagekit-gtk3-module_0.8.17-3_amd64.deb 36eec3590755c2944439b12b392d82fe1e500e63 19654 gstreamer0.10-packagekit_0.8.17-3_amd64.deb 352322a57ed959e553ff21db05394d816a9c3f00 31566 browser-plugin-packagekit_0.8.17-3_amd64.deb d8dc1a96a995bf396b01ef57497de07d194a671d 27456 python3-packagekit_0.8.17-3_all.deb b829c75c43db2c14a86650225af0508803a5cba9 113802 packagekit-backend-aptcc_0.8.17-3_amd64.deb 1a53c239b2db8066681b9d460adf817407630277 27124 packagekit-backend-smart_0.8.17-3_amd64.deb c85c81618d995e4e4a2753cae3fb8c8210815b2e 1589438 packagekit-dbg_0.8.17-3_amd64.deb Checksums-Sha256: 49af2b6641f90529bff868353d5ad2692a8c0e5c5a71564d1bd914395475725a 3442 packagekit_0.8.17-3.dsc 9b9dd9ac27fda2111716c9f9b07de728947a67416e513f1284339349a413a764 21524 packagekit_0.8.17-3.debian.tar.xz b91be934efa1ebbfa6a084ee8a926b045b28ccb5200458a159ca55f8af066fb5 459296 packagekit_0.8.17-3_amd64.deb b908591c0beee4426275a7bdc0dc1529c841a7b2836d02b5017157b574a16e20 50962 packagekit-tools_0.8.17-3_amd64.deb 6f7ee84e3e8d7526196180342180f03f6ce83daf03a206d650af7d6156604f38 380760 packagekit-docs_0.8.17-3_all.deb 908681651eba95a23e39f917970b6106a84c53896dedb5f1752d3886ebc2bd68 111626 libpackagekit-glib2-16_0.8.17-3_amd64.deb 4fe58e02551a404de40bc369112c7dca2b813a165135fe4d6364ecef34f1cd64 70762 libpackagekit-glib2-dev_0.8.17-3_amd64.deb 57f13a64f8c782f3f18ef01aaed2a195a4237ed012b87776930c65ff147cff2d 37736 gir1.2-packagekitglib-1.0_0.8.17-3_amd64.deb c3e70a8084c381d0768c6cd94451967e8df5c8b6d6b106098fc546789d2411d9 19484 packagekit-gtk3-module_0.8.17-3_amd64.deb 6dc017bd1e716d511bcb654605fe9bd509bb10d2b73406d73ee83886d1e0b043 19654 gstreamer0.10-packagekit_0.8.17-3_amd64.deb c6f3233a84febb8f9268f6a31b3ed1ce51fe5a8d9a498050b8b90c5945c70186 31566 browser-plugin-packagekit_0.8.17-3_amd64.deb 25b9d9f97cbb9585a0def093e8d15bd0db74f6dc5f85d9bb48d41611291b875e 27456 python3-packagekit_0.8.17-3_all.deb c0b944a73c234366b1883e825be3f01ad10fb0bd38de57e65dd18e5d8d1be85b 113802 packagekit-backend-aptcc_0.8.17-3_amd64.deb 99bd0848311945c05b709e2dbb545c76ca42bcef4e920040937c8a1f86ab79d6 27124 packagekit-backend-smart_0.8.17-3_amd64.deb ff2a9f13e589eed1c59fa2509904fc5ffa47a8706348951a5af6dc5b98a177f3 1589438 packagekit-dbg_0.8.17-3_amd64.deb Files: 7ddd071f68a486c192ad3c8dcc1acc56 459296 admin optional packagekit_0.8.17-3_amd64.deb b100575ffe3bbdf253955322c9ea610c 50962 libs optional packagekit-tools_0.8.17-3_amd64.deb fe7bca182578210cf3aa5039b93fd9dd 380760 doc optional packagekit-docs_0.8.17-3_all.deb b2da3e16f11b6db1dbbd76465274cc01 111626 libs optional libpackagekit-glib2-16_0.8.17-3_amd64.deb 26b706408e02bc7ea3a63f055f53300e 70762 libdevel optional libpackagekit-glib2-dev_0.8.17-3_amd64.deb 34e94037004415a1bf7f4e2a33efbfb2 37736 introspection optional gir1.2-packagekitglib-1.0_0.8.17-3_amd64.deb 0bbfee8916af46d8d862d63ebb03b8ce 19484 libs optional packagekit-gtk3-module_0.8.17-3_amd64.deb 57f549cbaee030dd0b24cb6de389b233 19654 libs optional gstreamer0.10-packagekit_0.8.17-3_amd64.deb 32405eb4590ea8615ae03b25602e505c 31566 web optional browser-plugin-packagekit_0.8.17-3_amd64.deb 2e5c3b79fc55dc1dfb6cb3e6c30961ca 27456 python optional python3-packagekit_0.8.17-3_all.deb b0d90b151f1c0df62b489be9517fde77 113802 admin optional packagekit-backend-aptcc_0.8.17-3_amd64.deb 16284d58dacf329faee192adb0293059 27124 admin optional packagekit-backend-smart_0.8.17-3_amd64.deb ca9164881487999a50ba161d4db453e5 1589438 debug extra packagekit-dbg_0.8.17-3_amd64.deb 8ea991b1b3b6d7f7437e314b0a5764cd 3442 admin optional packagekit_0.8.17-3.dsc 6bf19489f631c045d6fd0ef368a4e138 21524 admin optional packagekit_0.8.17-3.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJTnC1QAAoJEElMil+/TezrtnoP/1Js68ZNxUivRuQjcHBguulS 6NCM0W/Qj7KbIqWHFui4AqGLgcTXSY7wv6GtoGBxRo2+BAN4dhG5P0ZNMcwDYFps gzNG2xvYe4Z7bHenu36etsQwY3SvRd4LAiA6kWqN+6aHufMYcKZzwJvh4If5KZdz 6w6r0rXbI3VRGwo0oUXfoeoOTHAAT1lm1Amq2IJ2nwe0rtJxWOMpueblrwQ0m6rT Sm/gk4kgCUGQ5m/55C7J0GgOc1r3t0Toj//7nH4CZogOYekAI6Y/p/tx+4RXm9Yg RUxU9ireeFS3xT2XeH7l+E27MMN3Vzg6NQs34CEeb6d1kyWCTwMjYqmXt4W/LT1I xkbwOJS6As3vv7m9gzOiPhjPLIgTjWEtwDCRZmzPFWN4SQXxz5dwte+Zay/t5t1j MM0XEtNIU8C1Fm+BR3qkqgz5Ngtf+vTiMSkeBitKr71e7vBcR5ErD0RVU8m+u6eR 7+HriOsIqon46xfaOM5rtzQaFChcOZQG3sJsGFd/9i86NMPrtyjOctfE8PI+VoSw lE+Ohkd3zpa+a9d6Y0QABk6zz7rg+wsIr4Duny3xroLvv3r4PokwbfuBe2ZL76p4 R9A9v5DdM+YEGQDwz7rEQiV+wF1Tenqzdpdi6oI8N2V7dHg9IwjLOtjsbd20rKfV C3IhKWimlfIJEZeIkMH0 =dss6 -----END PGP SIGNATURE-----
--- End Message ---
