Package: screenkast Version: 0.1.4-2 Severity: serious Tags: security Hi, screenkast currently has a Build-Depends: libxaw6-dev, and therefore a Depends: libxaw6 in the binary package.
libxaw6 is deprecated, superseded by libxaw7, and it contains a security flaw where passwords are shown in plain text, see Debian bug #172890 [ http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=172890 ] Could you please therefore rebuild screenkast using libxaw7 rather than libxaw6? screenkast is the last package using libxaw6. After fixing this bug we will be free to remove it from Debian altogether. Thanks, Drew Parsons X Strike Force -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (990, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.22 (PREEMPT) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
