Uptream informed us that the initial MIR description wrongly that there are no sgid binaries, but /usr/bin/plocate is sgid plocate.
I think this warrant then a security review. @enr0n: do you need for this LTS release? If so, please target it to mention that to the security team. If the security team doesn’t have the bandwidth to deal with it before beta, we will then need to revert this to the previous state, being mlocate. ** Changed in: plocate (Ubuntu) Status: Fix Released => New ** Changed in: plocate (Ubuntu) Assignee: (unassigned) => Canonical Security Team (canonical-security) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1960864 Title: [MIR] plocate To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/plocate/+bug/1960864/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs