Hi, On Sonntag, 6. Dezember 2009, Arthur de Jong wrote: > I brought up bug #552433 here earlier [0] and have been in contact with > the security team about this but haven't had a definite answer from them > whether they want (or don't want) to issue an advisory for this. > > I'm now convinced this is a security problem because it can result in > wrong privileges to be assigned and in denial of service (see [1] for > more information). Debian Edu would also very much like this to be fixed soon, see http://bugs.skolelinux.org/show_bug.cgi?id=1383 - it's a release blocker for our lenny based release as it causes (+has caused already) real world prblems as you can read in #1383. cheers, Holger
Attachment:
signature.asc
Description: This is a digitally signed message part.