pound.armv7hl: W: missing-call-to-chdir-with-chroot /usr/sbin/pound
This executable appears to call chroot without using chdir to change the
current directory. This is likely an error and permits an attacker to break
out of the chroot by using fchdir. While that's not always a security issue,
this has to be checked.

pound.armv7hl: W: missing-call-to-setgroups-before-setuid /usr/sbin/pound
This executable is calling setuid and setgid without setgroups or initgroups.
There is a high probability this means it didn't relinquish all groups, and
this would be a potential security issue to be fixed. Seek POS36-C on the web
for details about the problem.

3 packages and 0 specfiles checked; 0 errors, 2 warnings.