[buildd-tools-devel] Bug#816897: sbuild --build-dep-resolver=aptitude will install packages from untrusted sources

Johannes Schauer josch at debian.org
Sun May 8 13:31:08 UTC 2016


Control: severity -1 important
Control: tag -1 moreinfo

On Sun, 03 Apr 2016 08:10:03 +0200 Johannes Schauer <josch at debian.org> wrote:
> On Sun, 06 Mar 2016 13:25:21 +0100 Ansgar Burchardt <ansgar at debian.org>
> wrote:
> > sbuild --build-dep-resolver=aptitude will install packages from
> > untrusted sources.
> 
> I cannot reproduce your findings.

because of its unreproducibility and no response from the submitter, I'm downgrading the severity of this bug to avoids sbuild's autoremoval from testing.

Thanks!

cheers, josch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/buildd-tools-devel/attachments/20160508/435163ee/attachment.sig>


More information about the Buildd-tools-devel mailing list