Control: tag 843874 pending Hi!
Bug #843874 in package dpkg reported by you has been fixed in the dpkg/dpkg.git Git repository. You can see the changelog below, and you can check the diff of the fix at: https://anonscm.debian.org/cgit/dpkg/dpkg.git/diff/?id=89b80a3 --- commit 89b80a3da82ea5b10b1500d6c531432d0ce585a5 Author: Guillem Jover <guil...@debian.org> Date: Thu Nov 10 16:42:13 2016 +0100 dpkg: Fix use after free issue on error summary We are releasing the dpkg database now after running the commands, which means that the postponed error reporting summary was trying to print messages that had already been freed from the database memory pool. Duplicate the passed strings so that we are impervious to the database life-cycle. Regression introduced in commit 3404fd24ef8020b4d6dc17adb82d7e6c035d90dc. Closes: #843874 diff --git a/debian/changelog b/debian/changelog index ff40966..3169791 100644 --- a/debian/changelog +++ b/debian/changelog @@ -7,6 +7,10 @@ dpkg (1.18.14) UNRELEASED; urgency=medium - Do not set PIE options if they have been negated, and do not reset them if they have been requested. Closes: #843791, #843826 + * Fix use after free error in dpkg. It was trying to print messages that + had already been freed as part of the database memory pool, causing in + some cases segfaults when reporting the error summary at the end. + Regression introduced in dpkg 1.18.11. Closes: #843874 * Test suite: - Do not fail tests on missing fakeroot, just skip them. * Build system: