Tags Tags

Bug#653959: citadel-server was auto-selected and installed by dist-upgrade for what appears to be no good reason, and apt-get purge citadel-server failed to back out all system changes

January 01st, 2012 - 05:50 pm ET by Joshua | Report spam
Help Create a new topic
Source: citadel-server
Version: wheezy
Severity: serious
Tags: security
Justification: Policy 3.5

apt-get dist-upgrade decided to install citadel-server (no I didn't know what it was) for who-knows-what reason.
Install created a new publicly listening service (never a good thing security-wise)
Install created a new user & group
an immediate apt-get purge citadel-server failed to back out the user,group,extra directories in /var

Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
* What outcome did you expect instead?

*** End of the template - remove these lines ***


Debian Release: wheezy/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash



To UNSUBSCRIBE, email to debian-bugs-dist-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
email Follow the discussionReplies 1 replyReplies Make a reply

Replies

#1 Joshua Hudson
January 01st, 2012 - 06:00 pm ET | Report spam
fiddling around with aptitude why revealed the haul-in is quilt
recommending mail-transport-agent

another case of the build tools requesting something absolute
nonsense. Last time around it was postgres, this time it was citadel

On 1/1/12, Joshua wrote:
Source: citadel-server
Version: wheezy
Severity: serious
Tags: security
Justification: Policy 3.5

apt-get dist-upgrade decided to install citadel-server (no I didn't know
what it was) for who-knows-what reason.
Install created a new publicly listening service (never a good thing
security-wise)
Install created a new user & group
an immediate apt-get purge citadel-server failed to back out the
user,group,extra directories in /var

Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
* What outcome did you expect instead?

*** End of the template - remove these lines ***


Debian Release: wheezy/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash








To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact

Similar topics

Make your own search :