-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package: xz-utils
Version: 5.1.1alpha+20120614-2
Severity: grave

Please convert all scripts (xzdiff, xzless, ...) to use /bin/sh as shell
and not /bin/bash. Most of them (as I checked) do not use any special
bash syntax anyway so there is no need to use bash.

I made this a grave bug as it is security relevant due the current bash
bugs and against the debian policy to use /bin/sh if possible.

- -- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (800, 'unstable'), (110, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.15.10 (SMP w/8 CPU cores)
Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1) (ignored: LC_ALL set to 
de_DE)
Shell: /bin/sh linked to /bin/dash

Versions of packages xz-utils depends on:
ii  libc6     2.19-11
ii  liblzma5  5.1.1alpha+20120614-2

xz-utils recommends no packages.

xz-utils suggests no packages.

- -- no debconf information

- -- 
Klaus Ethgen                              http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16   Klaus Ethgen <kl...@ethgen.de>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=YYRl
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to