Package: dtc-xen
Version: 0.2.6-5
Severity: important
Tags: security

Hi,

dtc-xen creates an ssl certificate in its postinst, using
"${RANDOM}${RANDOM}" as the passphrase.  This is obviously insecure.

Cheers,
Julien

Attachment: signature.asc
Description: Digital signature

Reply via email to