[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Is Bug#139359 really a bug ?

On Fri, 22 Mar 2002, Jean-Michel Kelbert wrote:
> However this line is for debuging.  So I ask me if it is neccessary to

That is not an acceptable excuse for disclosing sensitive information...
please consider it a bug, and fix it (probably you need to tell upstream to
fix it too).

The fix does not really need to be the removal the debug line. Preprocessing
the output to not disclose the password would be an ok fix, too.

  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh

Reply to: