[pkg-go] Bug#1062806: restic: self-update should be removed in Debian version

EastWan eastwan at eastwan.de
Sat Feb 3 12:47:02 GMT 2024


Package: restic
Version: 0.14.0-1+b5
Severity: normal
X-Debbugs-Cc: eastwan at eastwan.de

It appears the Debian version does not have the self-update functionality disabled.
Just ran restic self-update and it upgraded to the latest version.

I don't have a testing install to check restic there, but couldn't find any mention
in the changelog, so I assume it's the same in the latest release as well.

I don't believe it is a big issue as you would normally not run restic as root
(unless when backing up sys files) and self-update would then fail to update the
installed binary, but it seems wrong that a Debian package would allow self-update.

-- System Information:
Debian Release: 12.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.15.133.1-microsoft-standard-WSL2 (SMP w/4 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect

Versions of packages restic depends on:
ii  libc6  2.36-9+deb12u3

Versions of packages restic recommends:
ii  fuse3 [fuse]  3.14.0-4

Versions of packages restic suggests:
pn  libjs-sphinxdoc          <none>
pn  sphinx-rtd-theme-common  <none>

-- no debconf information



More information about the Pkg-go-maintainers mailing list