I sent the last mail to the wrong bug. I've copied it below. The fact that it is unreproducible on your machine doesn't make it no longer a security hole.
Here random characters / escape sequences can easily be reproduced (almost all the time) when typing "aptitude", but no longer when I type "strace -o aptitude.strace aptitude". This suggests some form of race condition. So, it won't be reproducible on all machines. -- Vincent Lefèvre <[EMAIL PROTECTED]> - Web: <http://www.vinc17.org/> 100% accessible validated (X)HTML - Blog: <http://www.vinc17.org/blog/> Work: CR INRIA - computer arithmetic / Arenaire project (LIP, ENS-Lyon)

