[Secure-testing-team] Bug#862787: debconf: Passwords do not match.

[luciano]

Package: debconf
Version: 1.5.56
Severity: grave
Tags: security
Justification: user security hole

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***
During the installation of ddclient, Debconf display the error "Passwords do not match. The two passwords you entered where not the same. Please try again". If I try again then the password is accepted. Always the same message, after more than 10 install/uninstall attemps using two different computers.

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 8.8
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages debconf depends on:
ii  perl-base  5.20.2-3+deb8u6

Versions of packages debconf recommends:
ii  apt-utils     1.0.9.8.4
ii  debconf-i18n  1.5.56

Versions of packages debconf suggests:
pn  debconf-doc                <none>
pn  debconf-utils              <none>
ii  libgtk2-perl               2:1.2492-4
pn  libnet-ldap-perl           <none>
ii  libqtcore4-perl            4.8.4-1.2
ii  libqtgui4-perl             4.8.4-1.2
pn  libterm-readline-gnu-perl  <none>
ii  perl                       5.20.2-3+deb8u6
ii  whiptail                   0.52.17-1+b1

-- debconf information:
  debconf-apt-progress/preparing:
  debconf-apt-progress/info:
  debconf-apt-progress/media-change:
  debconf/frontend: Dialog
  debconf-apt-progress/title:
  debconf/priority: high