tags 412853 + security

I am requesting that this be tagged as a security issue because:
(1) I have submitted a patch and the maintainer has not responded; it
is an easy fix
(2) Because the package strictly reports false positives for its
md5sum checks of suid and sgid files, and because its purpose in
checking those md5sums is to act as a security screen, it is possible
for a security breach of the type this package seeks to detect to
remain undetected.  (That is, while this package itself cannot be
exploited, its inability to perform its security scanning job properly
can be exploited.)


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to