According to http://lists.debian.org/debian-mentors/2008/04/msg00251.html which Paul Wise advice me to contact to the security audit team to review my package xiterm+thai (http://packages.qa.debian.org/x/xiterm% 2Bthai.html) The issue is setuid/setgid that used in this package for the properly fuction which now the latest xiterm+thai_1.07-1 already migrated to testing and if it have the vulnerabilities, must fix it. For the fixing process, I can try to fix or contact to the upstream, but the problem that I don't know where to start for this issue. Could anyone advice me? Best Regards, Neutron Soutmun
Attachment:
signature.asc
Description: =?UTF-8?Q?=E0=B8=99=E0=B8=B5=E0=B9=88=E0=B8=84=E0=B8=B7=E0=B8=AD?= =?UTF-8?Q?=E0=B8=AA=E0=B9=88=E0=B8=A7=E0=B8=99=E0=B8=82=E0=B9=89?= =?UTF-8?Q?=E0=B8=AD=E0=B8=84=E0=B8=A7=E0=B8=B2=E0=B8=A1=E0=B8=97?= =?UTF-8?Q?=E0=B8=B5=E0=B9=88=E0=B8=A1=E0=B8=B5=E0=B8=A5=E0=B8=B2?= =?UTF-8?Q?=E0=B8=A2=E0=B9=80=E0=B8=8B=E0=B9=87=E0=B8=99=E0=B8=94?= =?UTF-8?Q?=E0=B8=B4=E0=B8=88=E0=B8=B4=E0=B8=97=E0=B8=B1=E0=B8=A5?= =?UTF-8?Q?=E0=B8=81=E0=B8=B3=E0=B8=81=E0=B8=B1=E0=B8=9A?=