Package: restic Version: 0.14.0-1+b5 Severity: normal X-Debbugs-Cc: east...@eastwan.de
It appears the Debian version does not have the self-update functionality disabled. Just ran restic self-update and it upgraded to the latest version. I don't have a testing install to check restic there, but couldn't find any mention in the changelog, so I assume it's the same in the latest release as well. I don't believe it is a big issue as you would normally not run restic as root (unless when backing up sys files) and self-update would then fail to update the installed binary, but it seems wrong that a Debian package would allow self-update. -- System Information: Debian Release: 12.4 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 5.15.133.1-microsoft-standard-WSL2 (SMP w/4 CPU threads) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: unable to detect Versions of packages restic depends on: ii libc6 2.36-9+deb12u3 Versions of packages restic recommends: ii fuse3 [fuse] 3.14.0-4 Versions of packages restic suggests: pn libjs-sphinxdoc <none> pn sphinx-rtd-theme-common <none> -- no debconf information