Mark Eichin <[EMAIL PROTECTED]> writes: > Package: krb5-clients > Version: 1.4.4-7etch1 > Severity: normal
> According to http://web.mit.edu/kerberos/mail-lists.html krb5 bugs > should be submitted with krb5-send-pr. I suggest either actually > including it in some package, *or* if you prefer for these bugs to go > through debian, to have a krb5-send-pr installed that says that (or runs > reportbug appropriately, or something.) (I'd kind of prefer the former, > but that may not actually be right for the package...) I think the web page is actually the problem here and should be fixed, although Sam can speak to this better than I. The version of send-pr that comes with krb5 has /tmp file vulnerabilities, so it would need some work before shipping it with the Debian pacakge (see Bug#278271). send-pr is partly a left-over from when MIT Kerberos was using GNATS for bug tracking and they've since switched to RT. It still works (I think -- I haven't used it in a long time, and I see a bug was just filed upstream saying it didn't work properly for at least one person), in that it creates a bug in RT and does prompt for some useful information, but my understanding was that most people were creating bugs these days by just mailing them directly to the RT address. But maybe the prompting from send-pr is still useful. I'll wait for Sam to comment before doing anything with the bug. -- Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
