Hi, On Wed, Oct 15, 2014 at 10:23:33PM -0400, Michael Gilbert wrote: > package: src:dash > severity: important > version: 0.5.7-4 > tags: security > > As a hardening measure, dash should drop privileges early. See: > http://blog.cmpxchg8b.com/2013/08/security-debianisms.html > http://article.gmane.org/gmane.comp.shells.dash/841
This has been done now in Ubuntu: https://bugs.launchpad.net/ubuntu/+source/dash/+bug/1215660/comments/6 Regards, Salvatore -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org