Package: msmtp Version: 1.4.32-2+b1 Severity: normal Dear Maintainer,
not only this package has a security problem, by requiring exxecutable /tmp- folder. I think /tmp should be not executable to secure the system. By installing the package apt-get install msmtp Can't exec "/tmp/msmtp.config.xO8TpZ": no permission at /usr/share/perl/5.20/IPC/Open3.pm line 177. open2: exec of /tmp/msmtp.config.xO8TpZ configure failed at /usr/share/perl5/Debconf/ConfModule.pm line 59. After that, I purge the package, remount /tmp exec and reinstall package without problems. (Then I remount /tmp noexec) with regards Andreas Matthus -- System Information: Debian Release: 8.0 APT prefers stable APT policy: (990, 'stable'), (500, 'stable-updates'), (500, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages msmtp depends on: ii debconf [debconf-2.0] 1.5.56 ii libc6 2.19-18 ii libgnutls-deb0-28 3.3.8-6 ii libgsasl7 1.8.0-6 ii libidn11 1.29-1+b2 ii ucf 3.0030 Versions of packages msmtp recommends: ii ca-certificates 20141019 Versions of packages msmtp suggests: pn msmtp-mta <none> -- debconf-show failed
