pen.armv7hl: I: binary-or-shlib-calls-gethostbyname /usr/bin/pen
pen.armv7hl: I: binary-or-shlib-calls-gethostbyname /usr/bin/penlogd
The binary calls gethostbyname(). Please port the code to use getaddrinfo().

pen.armv7hl: W: missing-call-to-chdir-with-chroot /usr/bin/pen
pen.armv7hl: W: missing-call-to-chdir-with-chroot /usr/bin/penlogd
This executable appears to call chroot without using chdir to change the
current directory. This is likely an error and permits an attacker to break
out of the chroot by using fchdir. While that's not always a security issue,
this has to be checked.

pen.armv7hl: W: missing-call-to-setgroups-before-setuid /usr/bin/pen
This executable is calling setuid and setgid without setgroups or initgroups.
There is a high probability this means it didn't relinquish all groups, and
this would be a potential security issue to be fixed. Seek POS36-C on the web
for details about the problem.

pen.armv7hl: W: no-version-in-last-changelog
pen.src: W: no-version-in-last-changelog
The latest changelog entry doesn't contain a version. Please insert the
version that is coherent with the version of the package and rebuild it.

2 packages and 0 specfiles checked; 0 errors, 5 warnings.