Klaus Ethgen wrote: > I made this a grave bug as it is security relevant due the current bash > bugs and against the debian policy to use /bin/sh if possible.
The bash bug has been comprehensively fixed now. Bash no longer tries to parse random environment variables as if they contained shell code. It's valuable to find and fix unncessary bashisms, but by making the bugs grave, you're wasting the time of someone who is going to have to downgrade them, as well as potentially adding noise to people who are trying to stay on top of bugs that should utterly block the release of Debian. -- see shy jo
signature.asc
Description: Digital signature
