Sorry, forget my previous. I just saw that there is now a patch available. -timo On Tue, Feb 26, 2002 at 09:25:52AM +0100, Timo Benk wrote: > Hi, > > I don't know if this is the right place to post this issue, but i hope so. > > For about 10 days i filed a bug against the bookmarker package which is > not closed until know. > It exists a world readable file with the username and password to the mysql > database. Although that is not a severe security hole as it only allows > access to the local bookmarker database it is nevertheless a security hole. > > How is it possible that a bug concerning the security takes so long to be > closed? > > -timo > > -- > gpg key fingerprint = 6832 C8EC D823 4059 0CD1 6FBF 9383 7DBD 109E 98DC > -- gpg key fingerprint = 6832 C8EC D823 4059 0CD1 6FBF 9383 7DBD 109E 98DC
Attachment:
pgpjR4i585WZX.pgp
Description: PGP signature