Bug#747673: Horrid default cipher settings without option to adjust them to sane values

Package: ejabberd Version: 2.1.11-1 Followup-For: Bug #747673 Upstream added a configuration option to change allowed ciphers: https://github.com/processone/ejabberd/commit/1dd94ac0d06822daa8c394ea2da20d91c8209124 -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a

Bug#398733: /var/lib/open-iscsi/node.db world-readable

Package: open-iscsi Version: 1.0.485-3 Severity: grave Tags: security Justification: user security hole /var/lib/open-iscsi/* files are world-readable by default and may contain usernames and password used to authenticate both the initiator and the target -- System Information: Debian