Source: xfaces Version: 3.3-3 Severity: serious Tags: security X-Debbugs-Cc: secur...@debian.org
This source package contains a file alla.db with names and email addresses that appear to be real-world data. It is not used by the program or tests, so I assume it slipped in. I am going to remove it with a NMU and am copying the Security Team. Maybe Debian should do something about it (informing the people).
