Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Nov 2001 08:35:33 -0800
From:      Kris Kennaway <kris@obsecurity.org>
To:        Robert Watson <rwatson@FreeBSD.ORG>
Cc:        Vincent Poy <vince@oahu.WURLDLINK.NET>, Kris Kennaway <kris@obsecurity.org>, John Baldwin <jhb@FreeBSD.ORG>, cvs-all@FreeBSD.ORG, cvs-committers@FreeBSD.ORG, Dirk Meyer <dinoex@FreeBSD.ORG>
Subject:   Re: cvs commit: ports/net/freebsd-uucp Makefile distinfo pkg-pli
Message-ID:  <20011128083533.B44865@xor.obsecurity.org>
In-Reply-To: <Pine.NEB.3.96L.1011128105002.37721G-100000@fledge.watson.org>; from rwatson@FreeBSD.ORG on Wed, Nov 28, 2001 at 10:51:53AM -0500
References:  <20011128034906.K5788-100000@oahu.WURLDLINK.NET> <Pine.NEB.3.96L.1011128105002.37721G-100000@fledge.watson.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--MfFXiAuoTsnnDAfZ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Nov 28, 2001 at 10:51:53AM -0500, Robert Watson wrote:
> IOn Wed, 28 Nov 2001, Vincent Poy wrote:
>=20
> > > > Doesn't 4.3 have the built-in uucp support still?
> > >
> > > Yes.  We probably shouldn't build this on 4.x since it's not needed.
> >=20
> > 	I guess the only reason to build this is to have it there before
> > doing the 4.4-RELEASE buildworld upgrade of the OS just in case one
> > forgets about this.=20
>=20
> I've been wondering if we don't need an UPDATING entry for UUCP,
> suggesting that:
>=20
> (1) The user install the UUCP package in the future, if they use UUCP
> or
> (2) They garbage collect the UUCP binaries scattered around the system:
>     they still present a security risk, and won't be deleted in the
>     upgrade unless it's a reinstall.

It should be there on -current (probably already is, I can't check
right now).  It's stil in RELENG_4 so nothing needs to happen there.

> BTW, was the security problem ever actually fixed in the seperate UUCP
> distribution?  If not, we may need to add a warning to the package.

Yes, it was pulled out of -current post security fix.

Kris

--MfFXiAuoTsnnDAfZ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE8BRJVWry0BWjoQKURAhpvAKDZdO4M7zUJRDGedQtF2I5nyMkX6ACeM9Wm
NOVLoL8tnTly2+1ZUc08ZU8=
=3Pxh
-----END PGP SIGNATURE-----

--MfFXiAuoTsnnDAfZ--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011128083533.B44865>