Control: tag -1 d-i On Thu, Nov 21, 2024 at 09:36:13PM +0100, Chris Hofstaedtler wrote: > [ Reason ] > In the mitigation for CVE-2024-28085 util-linux intended to disable > setgid on write and wall. I used --disable-tty-group to achieve this. > However this causes `mesg y` to behave differently, it sets the tty mode > a+w. > This is surprising and not what was intended. Upstream removed this > misfeature and added a new configure flag to stop installing write, wall > setgid. > > This update adds the upstream patch(es) and uses the new configure flag > instead.
d-i ack needed for the udebs, in CC. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1
