Hello there!
Firstoff, thanks for creating and maintaining this useful package.
Really appreciated.
I installed it on one box some versions ago and I decided to test it on other
boxes, as well.
However, I have just found that linux-vulnerability-mitigation/20260519.1-1
(currently in Debian unstable) fails to cleanly install, if I choose the
manual mode to select mitigations:
# aptitude install linux-vulnerability-mitigation
The following NEW packages will be installed:
linux-vulnerability-mitigation
[...]
Preconfiguring packages ...
find: ‘/usr/share/linux-vulnerability-mitigation/mitigations’: No such file or directory
Selecting previously unselected package linux-vulnerability-mitigation.
[...]
A debconf dialog appears and asks the user to choose a method to select
mitigations. If I choose "manual", the following happens:
Usage: linux-vulnerability-mitigation install -m|--mitigation={MITIGATION|MITIGATION1,MITIGATION2,...|ALL}
See linux-vulnerability-mitigation-install(1), linux-vulnerability-mitigation(1) and linux-vulnerability-mitigation(7) for more information.
dpkg: error processing package linux-vulnerability-mitigation (--configure):
old linux-vulnerability-mitigation package postinst maintainer script subprocess failed with exit status 1
Processing triggers for man-db (2.13.1-1)…
Errors were encountered while processing:
linux-vulnerability-mitigation
E: Sub-process /usr/bin/dpkg returned an error code (1)
Setting up linux-vulnerability-mitigation (20260519.1-1)…
Usage: linux-vulnerability-mitigation install -m|--mitigation={MITIGATION|MITIGATION1,MITIGATION2,...|ALL}
See linux-vulnerability-mitigation-install(1), linux-vulnerability-mitigation(1) and linux-vulnerability-mitigation(7) for more information.
dpkg: error processing package linux-vulnerability-mitigation (--configure):
old linux-vulnerability-mitigation package postinst maintainer script subprocess failed with exit status 1
Errors were encountered while processing:
linux-vulnerability-mitigation
After purging the package, I tried to install it again, but this time I chose
"none".
The installation succeeded.
But, needless to say, there was no debconf dialog to manually select the
mitigations.
I could however manually install the mitigations I needed with:
$ linux-vulnerability-mitigation check
$ linux-vulnerability-mitigation status
# linux-vulnerability-mitigation install -m CVE-2026-43494
Maybe I will stick to the "none" mode and manage mitigations with the
above commands.
But I think the "manual" mode should be fixed (or dropped entirely).
Please fix this bug.
Thanks for your time and dedication!