Hi,

On Wed, Oct 15, 2014 at 10:23:33PM -0400, Michael Gilbert wrote:
> package: src:dash
> severity: important
> version: 0.5.7-4
> tags: security
> 
> As a hardening measure, dash should drop privileges early.  See:
> http://blog.cmpxchg8b.com/2013/08/security-debianisms.html
> http://article.gmane.org/gmane.comp.shells.dash/841

This has been done now in Ubuntu:
https://bugs.launchpad.net/ubuntu/+source/dash/+bug/1215660/comments/6

Regards,
Salvatore


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to