[DSE-Dev] libselinux1 version 3.3-1+b1 not enforcing libc6 >= 2.30 during install

[Mihaly Bak]

 Hello Laurent.
This is my environment:
mihaly at nuci5:~$ dpkg -l | grep libselinux1ii  libselinux1:amd64                 2.8-1+b1                              amd64        SELinux runtime shared librariesmihaly at nuci5:~$ dpkg -l | grep libc6ii  libc6:amd64                       2.28-10                               amd64        GNU C Library: Shared librariesii  libc6-dev:amd64                   2.28-10                               amd64        GNU C Library: Development Libraries 
Into this I was able to dpkg -i the package and have everything break. I agree that It should not have been possible. I am not sure how to open a bug report. 
Regards Mihaly Bak.    Den tisdag 14 december 2021 13:27:55 CET, Laurent Bigonville <bigon at debian.org> skrev:  
 
  On 11/12/21 10:26, Mihaly Bak wrote:
  
 
 Hello.  Hello, 
  
  First of all, thank you very much for your efforts with the debian project! 
  The installation package for libselinux1 version 3.3-1+b1 amd64 does not enforce libc6 >= 2.30, during install. So you are able to "dpkg -i" install it on lower versions of libc6 and totally wipe out your system. Post the install everything break because of this and you get 
  "/lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.30' not found" for almost all commands, including dpkg, cp, halt and all other utilities that could resolve the situation. 
   
 
 
For what I can see, the version of libselinux1 in unstable has the following:
 
Depends: libc6 (>= 2.30), libpcre2-8-0 (>= 10.22)
 
Can you please tell me more from which version to which version you were updating?
 
 
I'm quite skeptical here, but could you please open a bug report for this?
 
Kind regards,
 
Laurent Bigonville
 
  
  Regards Mihaly  
 
   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/selinux-devel/attachments/20211214/de092be0/attachment.htm>