Date: Sun, 7 May 2000 11:41:30 +0300 (EEST) From: Adrian Penisoara <ady@freebsd.ady.ro> To: Warner Losh <imp@village.org> Cc: Kris Kennaway <kris@FreeBSD.org>, security-officer@FreeBSD.org, freebsd-security@FreeBSD.org Subject: Re: port update: mail/imap-uw from 4.7c1 to 4.7c2 Message-ID: <Pine.BSF.4.10.10005071140260.12288-100000@ady.warpnet.ro> In-Reply-To: <200005062225.QAA66596@harmony.village.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 6 May 2000, Warner Losh wrote: > In message <Pine.BSF.4.21.0005061423210.14022-100000@freefall.freebsd.org> Kris Kennaway writes: > : The alternative is reissuing advisories every time saying "whoops, the > : imap-uw port is insecure again".."now it's fixed".."oops, it's still > : insecure" > > No. Let's mark it insecure. Let's continue to update it with buffer > overflow fixes as they happen. If we go for a whole month without > getting any new ones, then we'll reevaluate then. > > In the mean time, we don't update the imap advisory beyond "it is > broken, has a poor track record and runs at elevated privs. It is > being disabled until such time as it can be trusted again." and let > the author whine all he wants. > Forgive me for redudancy, but doesn't OpenIMAPd sound good enough for a new and useful project ? Thanks, Ady (@freebsd.ady.ro) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.10005071140260.12288-100000>