According to http://lists.debian.org/debian-mentors/2008/04/msg00251.html which Paul Wise advice me to contact to the security audit team to review my package xiterm+thai (http://packages.qa.debian.org/x/xiterm% 2Bthai.html)
The issue is setuid/setgid that used in this package for the properly fuction which now the latest xiterm+thai_1.07-1 already migrated to testing and if it have the vulnerabilities, must fix it. For the fixing process, I can try to fix or contact to the upstream, but the problem that I don't know where to start for this issue. Could anyone advice me? Best Regards, Neutron Soutmun
signature.asc
Description: นี่คือ ส่วนข้ อความท ี่มีลา ยเซ็นด ิจิทัล กำกับ