From owner-freebsd-ports  Sat Jun 10  4: 4:30 2000
Delivered-To: freebsd-ports@freebsd.org
Received: from mail.surf1.de (mail.surf1.de [194.25.165.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 606EE37B84A; Sat, 10 Jun 2000 04:04:26 -0700 (PDT)
	(envelope-from alex@big.endian.de)
Received: from neutron.cichlids.com (p3E9C114D.dip0.t-ipconnect.de [62.156.17.77])
	by mail.surf1.de (8.9.3/8.9.3) with ESMTP id NAA14306;
	Sat, 10 Jun 2000 13:04:23 +0200
Received: from cichlids.cichlids.com (cichlids.cichlids.com [192.168.0.10])
	by neutron.cichlids.com (Postfix) with ESMTP
	id CF47EAC30; Sat, 10 Jun 2000 13:04:32 +0200 (CEST)
Received: by cichlids.cichlids.com (Postfix, from userid 1001)
	id 2AC5014A8F; Sat, 10 Jun 2000 13:04:18 +0200 (CEST)
Date: Sat, 10 Jun 2000 13:04:18 +0200
From: Alexander Langer <alex@big.endian.de>
To: Will Andrews <andrews@technologist.com>
Cc: John Holland <john@zoner.org>, ports@FreeBSD.ORG,
	freebsd-ports@FreeBSD.ORG
Subject: Re: Hylafax security audit
Message-ID: <20000610130418.E12587@cichlids.cichlids.com>
Mail-Followup-To: Will Andrews <andrews@technologist.com>,
	John Holland <john@zoner.org>, ports@FreeBSD.ORG,
	freebsd-ports@FreeBSD.ORG
References: <4.3.1.0.20000609101719.00ae4900@pop.mindspring.com> <20000609120536.N6343@argon.gryphonsoft.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0.1i
In-Reply-To: <20000609120536.N6343@argon.gryphonsoft.com>; from andrews@technologist.com on Fri, Jun 09, 2000 at 12:05:36PM -0400
X-PGP-Fingerprint: 44 28 CA 4C 46 5B D3 A8  A8 E3 BA F3 4E 60 7D 7F
X-PGP-at: finger alex@big.endian.de
X-Verwirrung: Dieser Header dient der allgemeinen Verwirrung.
Sender: owner-freebsd-ports@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Thus spake Will Andrews (andrews@technologist.com):

> > portions of the code.  I'd like to fix the buffer overflows so FreeBSD can 
> > have a secure port of Hylafax.
> Please feel free to submit patches etc. that fix Hylafax's security
> problems, and I guarantee you they will be committed ASAP.

Actually, "ASAP" has been "Sorry, no time to review them yet" by
someone (who also might be responsible for ports-security) for months
now.

Alex
-- 
(Imagine a big "FreeBSD - The Power To Serve" sticker here)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message