Re: Mass "do not use bash" bug filing

2014-10-04 Thread Colin Watson
On Tue, Sep 30, 2014 at 08:55:31AM +0200, Joël Krähemann wrote: > On gum, 2014-09-26 at 11:28 +0100, Adam D. Barratt wrote: > > I noticed that you appear to be filing several RC bugs against packages > > which use /bin/bash shebangs in their scripts. > > > > These bugs are *not* RC. The packages t

Re: Mass "do not use bash" bug filing

2014-09-29 Thread Joël Krähemann
On gum, 2014-09-26 at 11:28 +0100, Adam D. Barratt wrote: > Hi, > > I noticed that you appear to be filing several RC bugs against packages > which use /bin/bash shebangs in their scripts. > > These bugs are *not* RC. The packages themselves do not have security > issues. The interpreter they cho

Re: Mass "do not use bash" bug filing

2014-09-27 Thread Holger Levsen
On Freitag, 26. September 2014, Jakub Wilk wrote: > I was once accused of doing an unannounced MBF after filing a single > bug. :> It's not necessarily the bug volume that triggers anti-MBF > defence mechanisms in developers. lol / wow! /me giggles signature.asc Description: This is a digital

Re: Mass "do not use bash" bug filing

2014-09-26 Thread Daniel Baumann
On 09/26/2014 02:39 PM, Thorsten Glaser wrote: > For what it’s worth, OpenBSD/MirBSD have BSD-licenced > implementations of tools like zgrep, zless, etc. that > can be used (with s/gzip/xz/g) for xz as well. these utilities should not be in any compressor specific package int he first place, see z

Re: Mass "do not use bash" bug filing

2014-09-26 Thread Thorsten Glaser
On Fri, 26 Sep 2014, Klaus Ethgen wrote: > > bug in grep, xz-utils or gzip. > Only against that 3 tools that most likely are also used from network For what it’s worth, OpenBSD/MirBSD have BSD-licenced implementations of tools like zgrep, zless, etc. that can be used (with s/gzip/xz/g) for xz as

Re: Mass "do not use bash" bug filing

2014-09-26 Thread Jakub Wilk
* Klaus Ethgen , 2014-09-26, 11:36: I don't think that 3 bugs are "mass bug filling". I manually checked where such a bug report is needed. I was once accused of doing an unannounced MBF after filing a single bug. :> It's not necessarily the bug volume that triggers anti-MBF defence mechanism

Re: Mass "do not use bash" bug filing

2014-09-26 Thread Klaus Ethgen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am Fr den 26. Sep 2014 um 12:05 schrieb Adam D. Barratt: > > I don't think that 3 bugs are "mass bug filling". I manually checked > > where such a bug report is needed. > > There were three bugs within 20 minutes or so; I assumed that more were > co

Re: Mass "do not use bash" bug filing

2014-09-26 Thread Adam D. Barratt
On Fri, 2014-09-26 at 11:36 +0100, Klaus Ethgen wrote: > Am Fr den 26. Sep 2014 um 11:28 schrieb Adam D. Barratt: > > I noticed that you appear to be filing several RC bugs against packages > > which use /bin/bash shebangs in their scripts. > > Only against that 3 tools that most likely are also u

Re: Mass "do not use bash" bug filing

2014-09-26 Thread Klaus Ethgen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, Am Fr den 26. Sep 2014 um 11:28 schrieb Adam D. Barratt: > I noticed that you appear to be filing several RC bugs against packages > which use /bin/bash shebangs in their scripts. Only against that 3 tools that most likely are also used from ne

Mass "do not use bash" bug filing

2014-09-26 Thread Adam D. Barratt
Hi, I noticed that you appear to be filing several RC bugs against packages which use /bin/bash shebangs in their scripts. These bugs are *not* RC. The packages themselves do not have security issues. The interpreter they choose to use {may,does}, but that is not a bug in grep, xz-utils or gzip.