From owner-freebsd-ports  Thu Jul 16 08:23:39 1998
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id IAA24930
          for freebsd-ports-outgoing; Thu, 16 Jul 1998 08:23:39 -0700 (PDT)
          (envelope-from owner-freebsd-ports@FreeBSD.ORG)
Received: from mail.HiWAAY.net (fly.HiWAAY.net [208.147.154.56])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA24925
          for <freebsd-ports@FreeBSD.ORG>; Thu, 16 Jul 1998 08:23:36 -0700 (PDT)
          (envelope-from sprice@hiwaay.net)
Received: from localhost (sprice@localhost)
	by mail.HiWAAY.net (8.9.0/8.9.0) with SMTP id KAA01975;
	Thu, 16 Jul 1998 10:15:24 -0500 (CDT)
Date: Thu, 16 Jul 1998 10:15:24 -0500 (CDT)
From: Steve Price <sprice@hiwaay.net>
To: Adrian Penisoara <ady@warpnet.ro>
cc: Matt Behrens <matt@megaweapon.zigg.com>, imap-uw@freebsd.ady.ro,
        FreeBSD ports <freebsd-ports@FreeBSD.ORG>
Subject: Re: imap-uw security hole -- please update port
In-Reply-To: <Pine.BSF.3.96.980716173252.2735F-100000@ady.warpnet.ro>
Message-ID: <Pine.OSF.3.96.980716100820.23260C-100000@fly.HiWAAY.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-ports@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Hey, I won't worry if Matt doesn't. :)  If we don't install
the imap tools does that satisfy your requirements Matt or
are you expecting them to be installed as part of pine4?
If so, would a *_DEPENDS on the imap-uw port work?  Of
course its build/install would have to be conditionalized
appropriately first of course.

Just out of curiousity why isn't the imap-uw port afflicted
by the same security problems mentioned on BUGTRAQ?

Steve

On Thu, 16 Jul 1998, Adrian Penisoara wrote:

# Hi again,
# 
# On Thu, 16 Jul 1998, Adrian Penisoara wrote:
# 
# > > On Thu, 16 Jul 1998, Matt Behrens wrote:
# > > 
# > [...]
# > > # Just after Pine 4.00 was released, we were made aware of a security
# > > # problem with the imapd server that is included in the Pine 4.00
# 
#  Just two notes:
# 
#  It seems that _only_ the version included with Pine 4.00 has problems;
#  Don't worry about Pine4 port, it _doesn't_ build nor install the bundled
# tools (like mtest, ipopd, imapd).
# 
# > > # distribution. This will be fixed in the Pine 4.01 maintenance release, but
# > > # in the mean time, if you are using the UW IMAP server, please update it
# > > # with the following distribution:
# > > # 
# > > #    ftp://ftp.cac.washington.edu/mail/imap.tar.Z
# > > # 
# 
#   thanks again,
#   Ady (@freebsd.ady.ro)
# 
# 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message