First reported as bug #180780. This is actually a security issue, though
not a huge one. As the UID/GID are fairly low even a smallish system
could allocate them and result in files on /usr that are writable to a
user. This is being propogated through the security updates and is
present in 1.3.26-0woody5.

At a minimum this needs to be fixed in future security releases, but I'm
unsure whether this rates one on its own.


-- 
(\___(\___(\______          --=> 8-) EHM <=--          ______/)___/)___/)
 \   (    |         [EMAIL PROTECTED] PGP 8881EF59         |    )   /
  \_  \   |  _____  -O #include <stddisclaimer.h> O-   _____  |   /  _/
    \___\_|_/82 04 A1 3C C7 B1 37 2A*E3 6E 84 DA 97 4C 40 E6\_|_/___/



Reply via email to