Package: libgfshare-bin
Version: 1.0.2-1
Severity: critical

Well, the subject basically says it all. Severity critical as even the
package description suggests using it for cryptographic keys, which
the access to large amounts of data can depend on, in which case the
inability to reconstruct the key could result in massive data loss.

Test case:

while :; do
        mkdir 8ec81f75-3bc9-4b95-812d-41ca28365aad || exit 1
        echo | gfsplit /dev/stdin 8ec81f75-3bc9-4b95-812d-41ca28365aad/x
        rm `ls 8ec81f75-3bc9-4b95-812d-41ca28365aad/x.* | tail -2`
        [ "`gfcombine -o /dev/stdout 8ec81f75-3bc9-4b95-812d-41ca28365aad/x.* | 
md5sum`" = '68b329da9893e34099c7d8ad5cb9c940  -' ] && echo OK || echo ERR
        rm -rf 8ec81f75-3bc9-4b95-812d-41ca28365aad
        sleep 1
done




-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to