Bug#902722: CVE-2018-1000532

2019-01-31 Thread Moritz Mühlenhoff
severity 902722 grave
thanks

On Fri, Jun 29, 2018 at 11:05:17PM +0200, Moritz Muehlenhoff wrote:
> Package: beep
> Severity: important
> Tags: security
> 
> Please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000532

There's now a new release/fork:
https://github.com/johnath/beep/issues/11#issuecomment-454056858

Also, can we drop the setuid bit for buster, either in total or at least
make it not the default, but only opt-in?

Cheers,
Moritz



Bug#902722: CVE-2018-1000532

2018-06-29 Thread Moritz Muehlenhoff
Package: beep
Severity: important
Tags: security

Please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000532

Cheers,
Moritz