Hi,
On Tue, May 25, 2021 at 10:32:36AM +0200, Matthias Klumpp wrote:
> Hi Salvatore!
>
> Am Di., 25. Mai 2021 um 06:51 Uhr schrieb Debian Bug Tracking System
> <ow...@bugs.debian.org>:
> >
> > Processing commands for cont...@bugs.debian.org:
> >
> > > found 989049 0.4.2-1
> > Bug #989049 {Done: Matthias Klumpp <m...@debian.org>} [debspawn] debspawn:
> > privilege escalation via uid reuse
> > There is no source info for the package 'debspawn' at version '0.4.2-1'
> > with architecture ''
> > Unable to make a source version for version '0.4.2-1'
> > Marked as found in versions 0.4.2-1; no longer marked as fixed in versions
> > debspawn/0.4.2-1 and reopened.
> > > thanks
> > Stopping processing here.
>
> Can you please elaborate on why you reopened this issue? I believe it
> has indeed been addressed with version 0.4.2-1, there is no more uid
> reuse for the build user and Debspawn will pick a free uid that is not
> in use on the host system for building packages.
The reason ist very simple, because I messed up the 'found' version :)
I will fix that up in a minute.
Regards,
Salvatore
