Secure testing team - Jun 2011 - Bug#630812: egrep warning when installing package

Package: adjtimex
Version: 1.29-2.1
Severity: minor
Tags: security


When installing the package, egrep warns... as per below

Building dependency tree       
Reading state information... Done
Suggested packages:
  ntpdate
The following NEW packages will be installed:
  adjtimex
0 upgraded, 1 newly installed, 0 to remove and 46 not upgraded.
Need to get 61.5 kB of archives.
After this operation, 139 kB of additional disk space will be used.
Get:1 http://mirror.optus.net/debian/ sid/main adjtimex amd64 1.29-2.1 [61.5 kB]
Fetched 61.5 kB in 0s (116 kB/s)
Preconfiguring packages ...
Selecting previously deselected package adjtimex.
(Reading database ... 145414 files and directories currently installed.)
Unpacking adjtimex (from .../adjtimex_1.29-2.1_amd64.deb) ...
Processing triggers for man-db ...
Setting up adjtimex (1.29-2.1) ...
egrep: character class syntax is [[:space:]], not [:space:]
Regulating system clock...done.
Comparing clocks (this will take 70 sec)...done.
Adjusting system time by -5.77194 sec/day to agree with CMOS clock...done.
mele:/home/dean# 

Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, ''unstable'')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.39-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages adjtimex depends on:
ii  debconf [debconf-2.0]         1.5.39     Debian configuration management sy
ii  libc6                         2.13-7     Embedded GNU C Library: Shared lib

adjtimex recommends no packages.

Versions of packages adjtimex suggests:
pn  ntpdate                       <none>     (no description available)

-- debconf information:
  adjtimex/compare_rtc: true
  adjtimex/run_daemon: true

On Sat, Jun 18, 2011 at 12:16:33AM +1000, Dean Hamstead
wrote:
> Package: adjtimex
> Version: 1.29-2.1
> Severity: minor
> Tags: security
> 
> 
> When installing the package, egrep warns... as per below
> 
> egrep: character class syntax is [[:space:]], not [:space:]
> Regulating system clock...done.
> Comparing clocks (this will take 70 sec)...done.
> Adjusting system time by -5.77194 sec/day to agree with CMOS clock...done.
> mele:/home/dean# 
Does this really need to be tagged ''security''? What are the
implications?


-- 
Jonathan Wiltshire                                      jmw at debian.org
Debian Developer                         http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

sorry, was a typo at my end

D



On 21/06/2011, at 12:26 AM, Jonathan Wiltshire <jmw at debian.org> wrote:
> On Sat, Jun 18, 2011 at 12:16:33AM +1000, Dean Hamstead wrote:
>> Package: adjtimex
>> Version: 1.29-2.1
>> Severity: minor
>> Tags: security
>> 
>> 
>> When installing the package, egrep warns... as per below
>> 
>> egrep: character class syntax is [[:space:]], not [:space:]
>> Regulating system clock...done.
>> Comparing clocks (this will take 70 sec)...done.
>> Adjusting system time by -5.77194 sec/day to agree with CMOS
clock...done.
>> mele:/home/dean# 
> 
> Does this really need to be tagged ''security''? What are
the implications?
> 
> 
> -- 
> Jonathan Wiltshire                                      jmw at debian.org
> Debian Developer                         http://people.debian.org/~jmw
> 
> 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
> 
>