What do you mean by 'reproduced'? The report is about a DUD that updated rpm.rpm and was produced with 'mkdud --force' to ignore some warnings. Is that what you tested?