Devuan bug report logs - #734
report of tcsh square-bracket globbing bug

Package: tcsh; Maintainer for tcsh is (unknown); Source for tcsh is src:tcsh.

Reported by: "Robert M. Riches Jr." <rm.riches@jacob21819.net>

Date: Wed, 4 Jan 2023 03:48:01 UTC

Severity: critical

Tags: debian

Found in version 6.21.00-1.1

Fixed in version 6.21.00-2

Done: Mark Hindley <mark@hindley.org.uk>

Forwarded to https://bugs.debian.org/999754

Full log

🔗 View this message in rfc822 format

X-Loop: owner@bugs.devuan.org
Subject: bug#734: report of tcsh square-bracket globbing bug
Reply-To: Mark Hindley <mark@hindley.org.uk>, 734@bugs.devuan.org
Resent-From: Mark Hindley <mark@hindley.org.uk>
Resent-To: devuan-bugs@lists.dyne.org
Resent-CC: devuan-dev@lists.dyne.org
X-Loop: owner@bugs.devuan.org
Resent-Date: Mon, 09 Jan 2023 16:20:02 +0000
Resent-Message-ID: <handler.734.B734.167328108318578@bugs.devuan.org>
Resent-Sender: owner@bugs.devuan.org
X-Devuan-PR-Message: followup 734
X-Devuan-PR-Package: tcsh
X-Devuan-PR-Keywords: 
References: <20230104034554.970D1283920@one.localnet> <20230104034554.970D1283920@one.localnet>
Received: via spool by 734-submit@bugs.devuan.org id=B734.167328108318578
          (code B ref 734); Mon, 09 Jan 2023 16:20:02 +0000
Received: (at 734) by bugs.devuan.org; 9 Jan 2023 16:18:03 +0000
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2001:41d0:2:d06e::5c4:2612]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Mon, 09 Jan 2023 16:18:03 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id R9vfKiI+vGO6ZQAAmSBk0A
	(envelope-from <mark@hindley.org.uk>)
	for <bugs@devuan.org>; Mon, 09 Jan 2023 16:17:38 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 8DE3FB85; Mon,  9 Jan 2023 16:17:38 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS
	autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; envelope-from=mark@hindley.org.uk; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id 964228CB
	for <734@bugs.devuan.org>; Mon,  9 Jan 2023 16:17:33 +0000 (UTC)
Received: from apollo.hindleynet ([192.168.1.3] helo=hindley.org.uk)
	by mx.hindley.org.uk with smtp (Exim 4.84_2)
	(envelope-from <mark@hindley.org.uk>)
	id 1pEuq3-0002xq-Cu; Mon, 09 Jan 2023 16:17:31 +0000
Received: (nullmailer pid 1926 invoked by uid 1000);
	Mon, 09 Jan 2023 16:17:31 -0000
Date: Mon, 9 Jan 2023 16:17:31 +0000
From: Mark Hindley <mark@hindley.org.uk>
To: "Robert M. Riches Jr." <rm.riches@jacob21819.net>, 734@bugs.devuan.org
Message-ID: <Y7w+G55EUv0NtPoo@hindley.org.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20230104034554.970D1283920@one.localnet>

Control: tags -1 debian
Control: forwarded -1 https://bugs.debian.org/999754
Control: fixed -1 tcsh/6.21.00-2

Robert,

Many thanks for this.

On Tue, Jan 03, 2023 at 07:45:54PM -0800, Robert M. Riches Jr. wrote:
> Package: tcsh
> Version: 6.21.00-1.1
> Severity: critical
> Justification: causes serious data loss
> Subject: tcsh: globbing false positives: [a-d]? and [a-d]* can delete unintended files like 21, 22, 23, etc.

tsch is not a forked package and Devuan uses Debian's packages directly without
recompilation. Fortunately this issue appears to have been reported to Debian's
BTS[1] and is fixed in version 6.21.00-2.

Mark

[1]  https://bugs.debian.org/999754

Send a report that this bug log contains spam.

Devuan bug report logs - #734 report of tcsh square-bracket globbing bug

Devuan bug report logs - #734
report of tcsh square-bracket globbing bug