Bug#1056970: bullseye-pu: package swupdate/2020.11-2+deb11u1

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 confirmed On Mon, Nov 27, 2023 at 12:12:27PM +0100, Bastian Germann wrote: > There is a local privilege escalation in swupdate package because the > service's control socket has world-writable file permissions. Please go ahead. Thanks, -- Jonathan Wiltshire

Bug#1056970: bullseye-pu: package swupdate/2020.11-2+deb11u1

2023-11-27 Thread Bastian Germann
Package: release.debian.org Control: affects -1 + src:swupdate X-Debbugs-Cc: swupd...@packages.debian.org User: release.debian@packages.debian.org Usertags: pu Tags: bullseye Severity: normal [ Reason ] There is a local privilege escalation in swupdate package because the service's control