From owner-freebsd-questions@FreeBSD.ORG Mon Mar 9 09:50:36 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 210DA106564A for ; Mon, 9 Mar 2009 09:50:36 +0000 (UTC) (envelope-from abalour@gmail.com) Received: from fk-out-0910.google.com (fk-out-0910.google.com [209.85.128.185]) by mx1.freebsd.org (Postfix) with ESMTP id A56198FC22 for ; Mon, 9 Mar 2009 09:50:35 +0000 (UTC) (envelope-from abalour@gmail.com) Received: by fk-out-0910.google.com with SMTP id f40so563964fka.11 for ; Mon, 09 Mar 2009 02:50:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:reply-to:in-reply-to :references:date:message-id:subject:from:to:cc:content-type; bh=Nu2byyYm/NGs7BZ8HRA5PXPYW6p4QvZPaBFfUSjY7Mg=; b=TwlbqHfCmb+y8kx8oKcGZdXWkXDPDtDNfKTLWHRv4tmUJcc4F/3i++XyUDA80RrGmH cVq0cmTdo1IlrauEc0kc/AUNvuZ1CV48sH48svuj1iYdcVBqIyJS1cwzv+VfErnqrf86 JBLs8zoPIUrHTxPuA30gfQ11aFDjKXoc/j8W0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:reply-to:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; b=Hxtdgac5hFi30c8kKKiwz38XgZutpf/EHyzoURotm6iMBQQJW8zArBfsoIGDHMn0lf SSSDJ32qcUINyUSa7qUmBoIJrAUuSnpV1etyxtaV5yEehQSVdM6JA/r2se/PTSWCWkAQ 1QOqYNRRRXPG6mm2oDgUxySda+5HXcwOaVyco= MIME-Version: 1.0 Received: by 10.86.66.19 with SMTP id o19mr3822181fga.68.1236592234807; Mon, 09 Mar 2009 02:50:34 -0700 (PDT) In-Reply-To: <94136a2c0903090047j34ddb20t2bebb19e8353fc66@mail.gmail.com> References: <94136a2c0903090036q51d569dfk4a58ef0f8cceab05@mail.gmail.com> <49B4C89C.7080205@gmail.com> <94136a2c0903090047j34ddb20t2bebb19e8353fc66@mail.gmail.com> Date: Mon, 9 Mar 2009 11:50:34 +0200 Message-ID: <35f70db10903090250q1b7c7dd9x30e1dc420fcfe0fc@mail.gmail.com> From: Ross Cameron To: Zbigniew Szalbot Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: User Questions Subject: Re: roundcube security bug X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: ross.cameron@linuxpro.co.za List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2009 09:50:36 -0000 On Mon, Mar 9, 2009 at 9:47 AM, Zbigniew Szalbot wrote: > On Mon, Mar 9, 2009 at 08:43, Brent Clark > wrote: > > Hiya > > > > Have you notified and / or checked with the upstream authour (maybe the > > mailinglist too) > > Not really. It requires subscribing to a mailing list which I don't > have time to do at the moment. > Surely an attempted cracking attempt on you're server warrants making time? Without detailed reports of issues like this how is the vendor expected to correct the problem? Avoiding installing the code is just a lazy workaround, helping the author's will improve the general open source software ecosystem.