Bug#981647: libgnupg-interface-perl 1.01 breaks ssh-agent msva-perl ...

[Aaron M. Ucko]

Package: libgnupg-interface-perl
Version: 1.01-1
Severity: important
Tags: upstream
X-Debbugs-Cc: msva-perl at packages.debian.org
Control: affects -1 msva-perl

[Copying msva-perl maintainers.]

My X session normally boils down to

exec /usr/bin/ssh-agent /usr/bin/monkeysphere-validation-agent /usr/bin/im-launch x-session-manager

where /usr/bin/monkeysphere-validation-agent resolves (via the
alternatives system) to /usr/bin/msva-perl.  With this setup,
libgnupg-interface-perl 1.01 attempts to run gpg with no PATH and
bails because it couldn't find an acceptable version of gpg, thereby
immediately crashing msva-perl and my entire X session.

I'm not entirely sure what triggers the PATH-clearing here, perhaps
the fact that ssh-agent is setgid ssh.  Regardless, I'd suggest
setting a sane PATH that includes at minimum /bin and /usr/bin rather
than clearing PATH entirely.  (Explicitly running /usr/bin/gpg might
also work.)

Could you please take a look?

Thanks!

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-2-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libgnupg-interface-perl depends on:
ii  gnupg                       2.2.20-1
pn  libautodie-perl             <none>
ii  libmoo-perl                 2.004004-1
ii  libmoox-handlesvia-perl     0.001009-1
ii  libmoox-late-perl           0.100-1
ii  perl [libmath-bigint-perl]  5.32.0-6

libgnupg-interface-perl recommends no packages.

libgnupg-interface-perl suggests no packages.

-- no debconf information