Control: severity -1 serious

On Wed, 28 Nov 2018 at 22:08:05 +0100, Andreas Henriksson wrote:
> It seems a few files contains the full path of 'mktemp' found via
> AC_PROG_PATH during build.
> 
> Since PATH defaults to contain /usr/bin before /bin the found path will
> be /usr/bin/mktemp on a usrmerged system, since both paths are
> essentially the same thing there. This is however not desirable on
> a non-merged system where it needs to be /bin/mktemp.

This will become a practical problem as soon as Debian starts using
merged-/usr buildds. The problem scenario is:

- enca is built on a merged-/usr buildd
- /usr/bin/mktemp is recorded in the binary package
- this build of enca is installed on a non-merged-/usr system during
  the upgrade from Debian 11 to Debian 12
- whatever feature uses mktemp wil fail, because non-merged-/usr systems
  only have /bin/mktemp

Technical Committee resolution
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=994388#110 recommends
that this class of bug is treated as release-critical, so I'm raising the
severity of this bug report.

Please upload a fixed package before the Debian 12 freeze. The patch
that Andreas provided in 2018 looks likely to be an appropriate solution,
although I have not tested it.

Thanks,
    smcv

Reply via email to