Does the Debian package ship poppassd? I don't think so: $ dpkg -L qpopper | grep bin /usr/bin /usr/bin/popauth /usr/sbin /usr/sbin/in.qpopper $ dpkg -l qpopper [...] ii qpopper 4.0.5-4 Enhanced Post Office Protocol server (POP3) $
However, password/Makefile.in does indeed install poppassd SUID root, and the -t option allows appending data to some user-specific file. *sigh* To sum it up: The bug report appears to be real, but Debian's package does not seem to be affected. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
