Package: googleearth-package
Version: 0.7.0
Severity: important
Tags: security



Hello,

The package google-earth-stable that googleearth-package builds includes
a file under /etc/cron.daily that tries to import a GPG key and also
tires to include google repositories into the system ones.

Please, ensure that googleearth-package strips any file under /etc/cron*
from the google's tarball before building the package.


$ dpkg -S /etc/cron.daily/google-earth
google-earth-stable: /etc/cron.daily/google-earth



Thanks!

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to