Hi, I don't know if this is the right place to post this issue, but i hope so. For about 10 days i filed a bug against the bookmarker package which is not closed until know. It exists a world readable file with the username and password to the mysql database. Although that is not a severe security hole as it only allows access to the local bookmarker database it is nevertheless a security hole. How is it possible that a bug concerning the security takes so long to be closed? -timo -- gpg key fingerprint = 6832 C8EC D823 4059 0CD1 6FBF 9383 7DBD 109E 98DC
Attachment:
pgp9rxlJVoBrl.pgp
Description: PGP signature