[kubuntu-users] Re: Huge security problem with Breezy

[Jonathan Riddell]

On Sun, Mar 12, 2006 at 10:55:11PM -0600, Howard Coles Jr. wrote:
> Why would this file be kept around, or why would it be 
> storing password prompt info at all, much less as clear text?!?

Colin Watson explains

"some changes we needed to make in cdebconf for other reasons in
Breezy broke the mechanism that was supposed to make sure that
passwords ended up in a separate database."

http://www.osnews.com/permalink.php?news_id=13951&comment_id=103849

Fixes in breezy-updates and dapper will clean up the file.

Jonathan