Package: cups-client Version: 1.3.8-1+lenny8 Severity: normal cups-client does not respect information set by dpkg-statoverride. We use dpkg-statoverride to force lppasswd to not be setuid root, however the cups-client postinst does not look at dpkg-statoverride information, and forces /usr/bin/lppasswd to be setuid root.
Before upgrade: $ dpkg-statoverride --list /usr/bin/lppasswd root lpadmin 755 /usr/bin/lppasswd $ ls -l /usr/bin/lppasswd -rwxr-xr-x 1 root lpadmin 13752 2010-06-18 11:16 After taking an upgrade of cups-client: $ ls -l /usr/bin/lppasswd -rwsr-xr-x 1 root lpadmin 13752 2010-06-18 11:16 -- System Information: Debian Release: 5.0.4 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
