Bug#812512: [Pkg-utopia-maintainers] Bug#812512: pkexec tty hijacking via TIOCSTI ioctl

2021-06-13 Thread argv minus one
On Sun, Jun 13, 2021, 6:14 AM Michael Biebl wrote: > Hm, I'm not seeing a patch there. Do you maybe have link to this kernel > patch? > No, sorry. The existence of such a patch is implied by [1], and there was an unsuccessful attempt to merge such a patch into upstream Linux [2], but that's all

Bug#812512: pkexec tty hijacking via TIOCSTI ioctl

2021-06-12 Thread argv minus one
Upstream has decided not to fix this vulnerability [1]. Apparently they're using a Linux kernel patch that makes TIOCSTI require CAP_SYS_ADMIN [2], making this vulnerability impossible to exploit, but the Debian kernel sources don't seem to contain such a capability check, so polkit on Debian is st

Bug#971778: [debian-mysql] Bug#971778: Bug#971778: mariadb-client-core-10.5: mariadb-embedded is missing

2020-10-09 Thread argv minus one
I looked over the documentation again, and found out that I can use the --init-file option to run some SQL when the server starts up. This does what I need, without using mariadb-embedded. Thanks!

Bug#971778: [debian-mysql] Bug#971778: mariadb-client-core-10.5: mariadb-embedded is missing

2020-10-08 Thread argv minus one
My use-case for it is setting up some databases for development/testing. I have a script that does three things: 1. Run mysql_install_db if necessary 2. Recreate some dev/test databases, by running some DROP DATABASE IF EXISTS and CREATE DATABASE statements using mysql_embedded 3. Run mysqld That

Bug#971778: mariadb-client-core-10.5: mariadb-embedded is missing

2020-10-06 Thread argv minus one
Package: mariadb-client-core-10.5 Version: 1:10.5.5-2 Severity: normal Previous MySQL/MariaDB packages contained the `mysql_embedded` or `mariadb- embedded` program, but the 10.5 packages don't seem to contain it. Searching on packages.debian.org shows that this program used to be in the `mariadb-