Bug#927841: plowshare: plowmod is inherently insecure

2019-04-23 Thread Carl Suster
Control: severity -1 normal Thanks for your report. I have to disagree about the severity of this issue, however. To start with some history, the upstream developer moved all of the plowshare modules some time ago into a separate git repository with a name that included the word "legacy".

Bug#927841: plowshare: plowmod is inherently insecure

2019-04-23 Thread Christoph Anton Mitterer
Package: plowshare Version: 2.1.7-2 Severity: grave Tags: security Justification: user security hole Hi. The removal of plowshare-modules, which was IMO quite !smart, forces users to use plowmod which is IMO, like basically every code-downloader inherently insecure. 1) There seems to be no