#1136485 conky uses pidof but does not depend on procps

Package:
src:conky
Source:
src:conky
Submitter:
Gioele Barabucci
Date:
2026-08-23 00:21:01 UTC
Severity:
normal
#1136485#5
Date:
2026-05-13 23:25:59 UTC
From:
To:
Dear maintainer(s) of conky,

it appears that conky uses `pidof` in its testsuite, or that
at least one of its binary packages uses `pidof` at runtime.
Historically, `pidof` was provided by the Essential package
`sysvinit-tools`, making an explicit dependency unnecessary. However
`pidof` will soon be moved to `procps` and will no longer be part of
the Essential set.

Please add an explicit dependency on `procps`:

* via the `Depends:` field of all binary packages of conky
  that use `pidof` at runtime;
* via the `Build-Depends:` field of conky, if `pidof` is
  used in tests run at build-time;
* via the `Depends:` field of `debian/control/tests`, if `pidof` is
  used in autopkgtests.

To prevent any disruption for users of conky, please add
this dependency now, before `pidof` is moved from `sysvinit-utils` to
`procps`. Alternatively, you could remove all uses of `pidof`.

It is believed that conky uses `pidof` due to the following
code snippets:

```
path: conky_1.22.3-1/src/core.cc
      char buf[DEFAULT_TEXT_BUFFER_SIZE];
  snprintf(buf, DEFAULT_TEXT_BUFFER_SIZE, "pidof %s >/dev/null", arg);
  obj->data.s = STRNDUP_ARG;
  /* XXX: maybe use a different callback here */
```

Feel free to close this issue if this is a false positive (for example
if this code is in an unreachable code path).

Regards,
#1136485#10
Date:
2026-08-23 00:20:21 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
conky, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1136485@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vincent Cheng <vcheng@debian.org> (supplier of updated conky package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 22 Aug 2026 16:27:32 -0700
Source: conky
Built-For-Profiles: noudeb
Architecture: source
Version: 1.24.2+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Vincent Cheng <vcheng@debian.org>
Changed-By: Vincent Cheng <vcheng@debian.org>
Closes: 1136485
Changes:
 conky (1.24.2+dfsg-1) unstable; urgency=medium
 .
   * New upstream release; repack to remove code sourced from non-free CUDA.
     - Update debian/copyright with Files-Excluded stanza.
   * Add dependency on procps for all conky binary packages. (Closes: #1136485)
   * Update standards version to 4.7.4.
Checksums-Sha1:
 cfd9d238179e9fcf606cfd097746d6999de3f1e7 2598 conky_1.24.2+dfsg-1.dsc
 989340815b8bd2338c9dfe7d8b8f65dc280c5c5a 1849212 conky_1.24.2+dfsg.orig.tar.xz
 a3270cfc69f192398860451bda2889765e28d349 19792 conky_1.24.2+dfsg-1.debian.tar.xz
Checksums-Sha256:
 eb765c10430a70a96ed27e9505d980cb177ed4a30853f634d1a9204e0949e74b 2598 conky_1.24.2+dfsg-1.dsc
 aa8d7a1c8d1d27875b654e049bc03dbba9c73ba778d1c1628d37bae183f34936 1849212 conky_1.24.2+dfsg.orig.tar.xz
 e3a061a859bc4acf58584f8d20abdc672f470643d5f9ed4e1d8a9c43166eec1a 19792 conky_1.24.2+dfsg-1.debian.tar.xz
Files:
 5b5587d2436f5895e7751680344d88b3 2598 utils - conky_1.24.2+dfsg-1.dsc
 3297415e1a8a80727731d1d4259ba35d 1849212 utils - conky_1.24.2+dfsg.orig.tar.xz
 1736ebb5be4db1498b2e4773bc17b6d7 19792 utils - conky_1.24.2+dfsg-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
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=Jvk3
-----END PGP SIGNATURE-----