committing changes in /etc made by "apt dist-upgrade -y"

Packages with configuration changes:
-base-files 11.1+deb11u3 amd64
+base-files 11.1+deb11u4 amd64
-postfix 3.5.6-1+b1 amd64
+postfix 3.5.13-0+deb11u1 amd64
-tcpdump 4.99.0-2 amd64
+tcpdump 4.99.0-2+deb11u1 amd64

Package changes:
-apache2 2.4.53-1~deb11u1 amd64
-apache2-bin 2.4.53-1~deb11u1 amd64
-apache2-data 2.4.53-1~deb11u1 all
-apache2-utils 2.4.53-1~deb11u1 amd64
+apache2 2.4.54-1~deb11u1 amd64
+apache2-bin 2.4.54-1~deb11u1 amd64
+apache2-data 2.4.54-1~deb11u1 all
+apache2-utils 2.4.54-1~deb11u1 amd64
-base-files 11.1+deb11u3 amd64
+base-files 11.1+deb11u4 amd64
-bash 5.1-2+b3 amd64
+bash 5.1-2+deb11u1 amd64
-distro-info-data 0.51+deb11u1 all
+distro-info-data 0.51+deb11u2 all
-dpkg 1.20.10 amd64
-dpkg-dev 1.20.10 all
+dpkg 1.20.11 amd64
+dpkg-dev 1.20.11 all
-gnutls-bin 3.7.1-5 amd64
+gnutls-bin 3.7.1-5+deb11u1 amd64
-libapache2-mod-php7.4 7.4.28-1+deb11u1 amd64
+libapache2-mod-php7.4 7.4.30-1+deb11u1 amd64
-libdpkg-perl 1.20.10 all
+libdpkg-perl 1.20.11 all
-libfreetype6 2.10.4+dfsg-1 amd64
-libfribidi0 1.0.8-2 amd64
+libfreetype6 2.10.4+dfsg-1+deb11u1 amd64
+libfribidi0 1.0.8-2+deb11u1 amd64
-libgnutls-dane0 3.7.1-5 amd64
-libgnutls-openssl27 3.7.1-5 amd64
-libgnutls30 3.7.1-5 amd64
+libgnutls-dane0 3.7.1-5+deb11u1 amd64
+libgnutls-openssl27 3.7.1-5+deb11u1 amd64
+libgnutls30 3.7.1-5+deb11u1 amd64
-libintl-perl 1.26-3 all
-libintl-xs-perl 1.26-3 amd64
+libintl-perl 1.26-3+deb11u1 all
+libintl-xs-perl 1.26-3+deb11u1 amd64
-linux-image-amd64 5.10.120-1 amd64
-linux-libc-dev 5.10.120-1 amd64
+linux-image-5.10.0-16-amd64 5.10.127-1 amd64
+linux-image-amd64 5.10.127-1 amd64
+linux-libc-dev 5.10.127-1 amd64
-logrotate 3.18.0-2 amd64
+logrotate 3.18.0-2+deb11u1 amd64
-nano 5.4-2 amd64
+nano 5.4-2+deb11u1 amd64
-needrestart 3.5-4+deb11u1 all
+needrestart 3.5-4+deb11u2 all
-openssh-client 1:8.4p1-5 amd64
-openssh-server 1:8.4p1-5 amd64
-openssh-sftp-server 1:8.4p1-5 amd64
+openssh-client 1:8.4p1-5+deb11u1 amd64
+openssh-server 1:8.4p1-5+deb11u1 amd64
+openssh-sftp-server 1:8.4p1-5+deb11u1 amd64
-php7.4 7.4.28-1+deb11u1 all
-php7.4-cli 7.4.28-1+deb11u1 amd64
-php7.4-common 7.4.28-1+deb11u1 amd64
-php7.4-gd 7.4.28-1+deb11u1 amd64
-php7.4-json 7.4.28-1+deb11u1 amd64
-php7.4-ldap 7.4.28-1+deb11u1 amd64
-php7.4-opcache 7.4.28-1+deb11u1 amd64
-php7.4-readline 7.4.28-1+deb11u1 amd64
+php7.4 7.4.30-1+deb11u1 all
+php7.4-cli 7.4.30-1+deb11u1 amd64
+php7.4-common 7.4.30-1+deb11u1 amd64
+php7.4-gd 7.4.30-1+deb11u1 amd64
+php7.4-json 7.4.30-1+deb11u1 amd64
+php7.4-ldap 7.4.30-1+deb11u1 amd64
+php7.4-opcache 7.4.30-1+deb11u1 amd64
+php7.4-readline 7.4.30-1+deb11u1 amd64
-postfix 3.5.6-1+b1 amd64
-postfix-pcre 3.5.6-1+b1 amd64
-postfix-sqlite 3.5.6-1+b1 amd64
-procmail 3.22-26 amd64
+postfix 3.5.13-0+deb11u1 amd64
+postfix-pcre 3.5.13-0+deb11u1 amd64
+postfix-sqlite 3.5.13-0+deb11u1 amd64
+procmail 3.22-26+deb11u1 amd64
-tcpdump 4.99.0-2 amd64
+tcpdump 4.99.0-2+deb11u1 amd64

diff --git a/apparmor.d/usr.bin.tcpdump b/apparmor.d/usr.bin.tcpdump
index 38b2a357a4fb8aac19726cb8b31e23209fc37765..732a691f5e4140e53a555bc9cadd824d8c6bbaea 100644 (file)
--- a/apparmor.d/usr.bin.tcpdump
+++ b/apparmor.d/usr.bin.tcpdump
@@ -54,6 +54,10 @@ profile tcpdump /usr/bin/tcpdump {
 
   # for -r, -F and -w
   /**.[pP][cC][aA][pP] rw,
+  /**.[cC][aA][pP] rw,
+  # -W adds a numerical suffix
+  /**.[pP][cC][aA][pP][0-9]* rw,
+  /**.[cC][aA][pP][0-9]* rw,
 
   # for convenience with -r (ie, read pcap files from other sources)
   /var/log/snort/*log* r,

diff --git a/apt/apt.conf.d/01autoremove-kernels b/apt/apt.conf.d/01autoremove-kernels
index bede81d49f9db0361b970be2933f5b41dd9f0bce..b5b32b9a845ad5ffb67d8af91537355d036187eb 100644 (file)
--- a/apt/apt.conf.d/01autoremove-kernels
+++ b/apt/apt.conf.d/01autoremove-kernels
@@ -1,2 +1,2 @@
 // DO NOT EDIT! File autogenerated by /etc/kernel/postinst.d/apt-auto-removal
-APT::LastInstalledKernel "5.10.0-15-amd64";
+APT::LastInstalledKernel "5.10.0-16-amd64";

diff --git a/debian_version b/debian_version
index 8bb4222390ac2073a3a48a51ad3f9916ea649d0f..1c7134df6cf6b4091c7d8ef5a7e252d8b2d243db 100644 (file)
--- a/debian_version
+++ b/debian_version
@@ -1 +1 @@
-11.3
+11.4

diff --git a/network/if-up.d/postfix b/network/if-up.d/postfix
index f1203ffa36969aa3f6acc5ea2baf5efa12331589..49581b09829c70f2791cfb34db8a2593521ba07e 100755 (executable)
--- a/network/if-up.d/postfix
+++ b/network/if-up.d/postfix
@@ -38,6 +38,7 @@ fi
 # hanging around.  Yes, sendmail is a symlink...
 if [ -n "$RUNNING" ]; then
        if [ -x /usr/sbin/sendmail ]; then
-               /usr/sbin/sendmail -q >/dev/null 2>&1
+               # Don't propagate the exit code on failure; cf. #959864
+               /usr/sbin/sendmail -q >/dev/null 2>&1 || true
        fi
 fi

diff --git a/postfix/postfix-script b/postfix/postfix-script
index 9a907203ffe53a5ba74cd4db56ee0e7afd6b36a1..d9b72bf314d8959acd8120ea6551148d21d38467 100755 (executable)
--- a/postfix/postfix-script
+++ b/postfix/postfix-script
@@ -346,7 +346,10 @@ check-warn)
            -exec $WARN group or other writable: {} \;
 
        find $todo -type l | while read f; do \
-           readlink "$f" | grep -q / && $WARN symlink leaves directory: "$f"; \
+           # makedefs out known to be a symlink and OK
+           if [ "$f" != "/etc/postfix/./makedefs.out" ]; then \
+             readlink "$f" | grep -q / && $WARN symlink leaves directory: "$f"; \
+           fi \
        done; \
 
        # Check Postfix mail_owner-owned directory tree owner/permissions.

diff --git a/ppp/ip-up.d/postfix b/ppp/ip-up.d/postfix
index f1203ffa36969aa3f6acc5ea2baf5efa12331589..49581b09829c70f2791cfb34db8a2593521ba07e 100755 (executable)
--- a/ppp/ip-up.d/postfix
+++ b/ppp/ip-up.d/postfix
@@ -38,6 +38,7 @@ fi
 # hanging around.  Yes, sendmail is a symlink...
 if [ -n "$RUNNING" ]; then
        if [ -x /usr/sbin/sendmail ]; then
-               /usr/sbin/sendmail -q >/dev/null 2>&1
+               # Don't propagate the exit code on failure; cf. #959864
+               /usr/sbin/sendmail -q >/dev/null 2>&1 || true
        fi
 fi