[pkg-go] Bug#1062806: restic: self-update should be removed in Debian version
EastWan
eastwan at eastwan.de
Sat Feb 3 12:47:02 GMT 2024
Package: restic
Version: 0.14.0-1+b5
Severity: normal
X-Debbugs-Cc: eastwan at eastwan.de
It appears the Debian version does not have the self-update functionality disabled.
Just ran restic self-update and it upgraded to the latest version.
I don't have a testing install to check restic there, but couldn't find any mention
in the changelog, so I assume it's the same in the latest release as well.
I don't believe it is a big issue as you would normally not run restic as root
(unless when backing up sys files) and self-update would then fail to update the
installed binary, but it seems wrong that a Debian package would allow self-update.
-- System Information:
Debian Release: 12.4
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.15.133.1-microsoft-standard-WSL2 (SMP w/4 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect
Versions of packages restic depends on:
ii libc6 2.36-9+deb12u3
Versions of packages restic recommends:
ii fuse3 [fuse] 3.14.0-4
Versions of packages restic suggests:
pn libjs-sphinxdoc <none>
pn sphinx-rtd-theme-common <none>
-- no debconf information
More information about the Pkg-go-maintainers
mailing list