Package: gzip
Version: 1.3.12-9
Severity: wishlist

Please stop the usage of at least the gunzip shell-wrapper. Reasons:
- Needs a full-blown shell with its startup-cost, while it can be
  replaced by 4 lines of C.
- May execute _any_ available gzip binary in the path, not only the one
  provided by the package.
- Will prepend the contents of GZIP_BINDIR to PATH. There are clueless
  programmers out there who clear the obviously problems like PATH from
  the environment but not the rest, sudo was such an example.

Bastian

-- 
Live long and prosper.
                -- Spock, "Amok Time", stardate 3372.7



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to