Package: amaya Version: 9.2.1-6 Severity: grave Justification: might allow to access others users accounts Tags: security
Hello Anand, Amaya binary include a rpath: /usr/bin/amaya: RPATH=/home/anand/Debian/amaya/config--amaya-full/amaya-full/Amaya/WX/Mesa/lib This means that a user having access to /home/anand can potentially install malicious libraries in /home/anand/Debian/amaya/config--amaya-full/amaya-full/Amaya/WX/Mesa/lib that will get loaded by amaya in preference of the system libraries. Cheers, -- Bill. <[EMAIL PROTECTED]> Imagine a large red swirl here. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
