[Bug 1926504] Re: [Possible bug] dpkg-XXX (where XXX is name) does not read env variables

[Michal Dziczkowski]

sorry for typo. It should be: "especially if it's a security related
software"

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to dpkg in Ubuntu.
https://bugs.launchpad.net/bugs/1926504

Title:
  [Possible bug] dpkg-XXX (where XXX is  name) does not read env
  variables

Status in dpkg package in Ubuntu:
  New

Bug description:
  The reported problem (who exist in the most versions of Ubuntu and
  Debian) apply to the tools, who's name begin with "dpkg-". I'll give
  the problem description, basing on the example of "dpkg-buildflags".

  After running the dpkg-buildflags command with a propper parameter, in
  the terminal is displayed a list of compiler, linker, etc. flags, who
  differ themself from the ones with are set in the enviroment and with
  I wanted to use (instead of the displayed ones).

  The problem that the enviroment aren't read in any way thru this
  programs and use only the "build-in" ones, with is a quite serrios
  issue because it may create vulnerabilities in the created archives or
  even software.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dpkg/+bug/1926504/+subscriptions