From owner-freebsd-hackers  Thu Aug 28 20:16:01 1997
Return-Path: <owner-freebsd-hackers>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id UAA07569
          for hackers-outgoing; Thu, 28 Aug 1997 20:16:01 -0700 (PDT)
Received: from bitbox.follo.net (bitbox.follo.net [194.198.43.36])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id UAA07551
          for <freebsd-hackers@FreeBSD.ORG>; Thu, 28 Aug 1997 20:15:56 -0700 (PDT)
Received: (from eivind@localhost)
	by bitbox.follo.net (8.8.6/8.8.6) id FAA06905;
	Fri, 29 Aug 1997 05:15:41 +0200 (MET DST)
Date: Fri, 29 Aug 1997 05:15:41 +0200 (MET DST)
Message-Id: <199708290315.FAA06905@bitbox.follo.net>
From: Eivind Eklund <perhaps@yes.no>
To: Snob Art Genre <benedict@echonyc.com>
CC: freebsd-hackers@FreeBSD.ORG
In-reply-to: Snob Art Genre's message of Thu, 28 Aug 1997 22:37:10 -0400 (EDT)
Subject: Re: A disturbing discovery
References: <Pine.GSO.3.96.970828223602.3963B-100000@echonyc.com>
Sender: owner-freebsd-hackers@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> 
> When I made world the other day, it installed sperl4.036 -- isn't that
> known to be insecure?

Warner <imp@freebsd.org> fixed this, AFAIK.  It was unsecure, but
nothing that is known to be insecure is shipped.  (Well, there is
likely some exploits in games; I've been wanting to turn all of these
setgid for quite a long while now, but never got around to it...)

Eivind.