Re: Bug#1088008: bookworm-pu: package util-linux/2.38.1-5+deb12u3

2024-11-26 Thread Cyril Brulebois
Jonathan Wiltshire (2024-11-25): > Control: tag -1 d-i > > On Thu, Nov 21, 2024 at 09:36:13PM +0100, Chris Hofstaedtler wrote: > > [ Reason ] > > In the mitigation for CVE-2024-28085 util-linux intended to disable > > setgid on write and wall. I used --disable-tty-group to achieve this. > > Howev

Re: Bug#1088008: bookworm-pu: package util-linux/2.38.1-5+deb12u3

2024-11-25 Thread Jonathan Wiltshire
Control: tag -1 d-i On Thu, Nov 21, 2024 at 09:36:13PM +0100, Chris Hofstaedtler wrote: > [ Reason ] > In the mitigation for CVE-2024-28085 util-linux intended to disable > setgid on write and wall. I used --disable-tty-group to achieve this. > However this causes `mesg y` to behave differently, i