Hello,
  I see that openafs version 1.6.14-1 has a changelog item "Restore support for using regexes
for volume names to backup, accidentally disabled as part of the fix for OPENAFS-SA-2015-006", but
the most recent Jessie openafs version that I find (1.6.9-2+deb8u3) does not have this in the changelog.
  The Wheezy version (1.6.1-3+deb7u4) also appears not have the updated fix for OPENAFS-SA-2015-006.

Thanks for checking!
C.

tags 795926 +moreinfo
thanks

The current openafs versions in wheezy and jessie do not support the use
of regexps for volume names.  (That is, they do not include the change you
see mentioned in the 1.6.14-1 changelog.)

Are you encountering issues on a wheezy and/or jessie system while
attempting to use this functionality?  I am somewhat reluctant to put in
the time to push through the necessary stable-proposed-updates if there is
not actually anyone who will benefit from the changes.  (My understanding
is that most sites who use the OpenAFS backup system do so with the TSM
support, which is not enabled in the Debian packages and must be done via
a custom build.)

Hi Ben,

Thanks for clarifying.  I was unaware that the regexp functionality was added
after 1.6.9.

I was thinking -prefix, -exclude, and -xprefix options were what was meant by
the 'regexp' in the changelog for 1.6.14.

No.  But I was worried that if I updated to the newer 1.6.1 and 1.6.9 I would
lose functionality, due to my confusion as explained above.

Thanks for your time!
Chad.

Hmm, I am no longer sure that I have actually clarified :(

Er, options to what programs?

The only case I know of where sites have actually reported regressions in
functionality due to taking the security patches from the upstream 1.6.13
release (that is, 1.6.1-3+deb7u3, 1.6.9-2+deb8u3, or 1.6.13-1 -- those
patches have not made it to wheezy-backports or any form of squeeze-lts
yet) is at sites using the OpenAFS builtin backup suite -- that is, the
actual backup(8) command.  That command suite has the functionality to
specify a "volume set" to backup, and the volume set can use a regex to
match a subset of volumes by name.

Because of the way the code is structured (as a remote procedure call), it
is possible that there are other affected use cases, but we don't know of
any at this time.

It would be nice if you could try upgrading a system or two to test, so
that I know whether to close this bug or take action on it.  Reinstalling
the old version of the package should work fine to downgrade, if you need
to revert due to breakage.

Dough!

These options appear on the vos_backupsys manpage.  We (at some time) used
those options in scripts to create .backup volumes for some volumes, but not
others.

Also, we use Teradactyl TiBS to automate AFS volume backups.  I could check
with them if they use vos backup.

OK.  I'll do this in a month or so.  In the meantime, don't worry about it!

Thanks again,
Chad.

To be clear, "vos backup" and "vos backupsys" are completely different
from the "backup" command (e.g., "backup volrestore").

They do not use backup(8).

Thanks!