etcupdate and conflicts - security issue

Today I upgrade some systems from 13.2 to 13.3 and etcupdate show conflicts in /etc/master.passwd and /etc/group . I used etcupdate resolve to fix them but now I see files inside /var/db/etcupdate/conflicts/etc and what worries me is this:

Code:
ls -la /var/db/etcupdate/conflicts/etc/master.passwd
-rw-r--r--  1 root  wheel  5690 Feb 28 00:05 /var/db/etcupdate/conflicts/etc/master.passwd

This file contains the encrypted root and user password and is readable from everyone.

Should I create a bug report for this?
 
Back
Top