touch-packages team mailing list archive

[Bug Watch Updater <1459201@xxxxxxxxxxxxxxxxxx>]

** Changed in: bash (Debian)
       Status: Unknown => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to bash in Ubuntu.
https://bugs.launchpad.net/bugs/1459201

Title:
  privmode patch disables setuid protection

Status in bash package in Ubuntu:
  Triaged
Status in bash package in Debian:
  Won't Fix

Bug description:
  Debian carries a patch called "privmod.diff" that prevents bash from
  dropping privileges when setuid if not called "sh".

  This patch should be removed as it disables a bash security feature.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1459201/+subscriptions