Re: Is Bug#139359 really a bug ?
On Fri, 22 Mar 2002, Jean-Michel Kelbert wrote:
> However this line is for debuging. So I ask me if it is neccessary to
That is not an acceptable excuse for disclosing sensitive information...
please consider it a bug, and fix it (probably you need to tell upstream to
fix it too).
The fix does not really need to be the removal the debug line. Preprocessing
the output to not disclose the password would be an ok fix, too.
--
"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh
Reply to: