Hi Salvatore!
Am Di., 25. Mai 2021 um 06:51 Uhr schrieb Debian Bug Tracking System
<[email protected]>:
>
> Processing commands for [email protected]:
>
> > found 989049 0.4.2-1
> Bug #989049 {Done: Matthias Klumpp <[email protected]>} [debspawn] debspawn:
> privilege escalation via uid reuse
> There is no source info for the package 'debspawn' at version '0.4.2-1' with
> architecture ''
> Unable to make a source version for version '0.4.2-1'
> Marked as found in versions 0.4.2-1; no longer marked as fixed in versions
> debspawn/0.4.2-1 and reopened.
> > thanks
> Stopping processing here.
Can you please elaborate on why you reopened this issue? I believe it
has indeed been addressed with version 0.4.2-1, there is no more uid
reuse for the build user and Debspawn will pick a free uid that is not
in use on the host system for building packages.
Cheers,
Matthias
--
I welcome VSRE emails. See http://vsre.info/
