RC status of rpath issues

[Moritz Muehlenhoff <jmm@inutil.org>]

I've seen a couple of RC bugs being filed for rpath issues in various
packages. For stable-security these are only treated as DSA-worthy
if the rpath points to /tmp, but not towards a directory like /build
or a specific home directory, as exploiting these would require social
engineering against root. While they should of course be fixed where
possible I'd recommend against treating them as release critical per
se. (At least not in the sense they they're a reason for removing a
package from testing).

Cheers,
        Moritz