Uptream informed us that the initial MIR description wrongly that there
are no sgid binaries, but /usr/bin/plocate is sgid plocate.
I think this warrant then a security review.
@enr0n: do you need for this LTS release? If so, please target it to mention
that to the security team.
If the security team doesn’t have the bandwidth to deal with it before beta, we
will then need to revert this to the previous state, being mlocate.
** Changed in: plocate (Ubuntu)
Status: Fix Released => New
** Changed in: plocate (Ubuntu)
Assignee: (unassigned) => Canonical Security Team (canonical-security)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1960864
Title:
[MIR] plocate
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/plocate/+bug/1960864/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
