Bug#1016682: ocsinventory-reports: asks user to remove files form /usr/share/ocsinventory-reports/ocsreports
    Ansgar 
    ansgar at debian.org
       
    Fri Aug  5 08:31:20 BST 2022
    
    
  
Package: ocsinventory-reports
Version: 2.8.1+dfsg1-1
Severity: important
Tags: security
X-Debbugs-Cc: Debian Security Team <team at security.debian.org>
After installation and setup, ocsreports' web interface prominently
displays the following warning:
    SECURITY ALERT!
    Your install.php exists in your installation directory
    (by default : /usr/share/ocsinventory-reports/ocsreports).
Users should not have to remove files from /usr/share for a secure
installation.
Furthermore any files removed will reappear after a (security or
other) update, thereby reintroducing the problem. (Adding the
"security" tag for this reason.)
Ansgar
    
    
More information about the pkg-perl-maintainers
mailing list