Subject: Re: final testing: taylor-uucp package (fwd)
To: John Nemeth <firstname.lastname@example.org>
From: Rick Kelly <email@example.com>
Date: 10/28/2001 15:21:47
John Nemeth said:
>On Mar 20, 10:32am, Simon Burge wrote:
>} One reason for the recent push to pkgsrc'ise UUCP is that it had a
>} security hole, which was theoretically exploitable on a stock system
>} because we called one of the UUCP programs from the daily script...
> Which reminds me, we still haven't seen a patch for it for released
>versions of NetBSD, or a NetBSD security advisory on it.
And it seems to me that it would be more productive to fix the bug than
to remove functionality from the base OS.
Rick Kelly firstname.lastname@example.org www.rmkhome.com