Subject: Re: What to do about unfixed vulnerabilities?
To: Paul Hoffman <phoffman@proper.com>
From: Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>
List: tech-security
Date: 10/23/2000 18:58:24
  by mail.netbsd.org with SMTP; 23 Oct 2000 16:55:40 -0000
	by rfhs8012.fh-regensburg.de (8.10.1/8.10.1) with ESMTP id e9NGskG05405;
	Mon, 23 Oct 2000 18:54:47 +0200 (MET DST)
Date: Mon, 23 Oct 2000 18:58:24 +0200 (MET DST)
From: Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>
To: Paul Hoffman <phoffman@proper.com>
cc: tech-pkg@netbsd.org, tech-security@netbsd.org
Subject: Re: What to do about unfixed vulnerabilities?
In-Reply-To: <20911897.972319520349.JavaMail.imail@prickles>
Message-ID: <Pine.GSO.4.21.0010231856390.2541-100000@rfhpc8320.fh-regensburg.de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Mon, 23 Oct 2000, Alistair Crooks wrote:
> Thanks - the cvs log for the pine Makefile tells me that the advisory in
> http://www.securityfocus.com/advisories/2646 was fixed in version 1.35 of
> the Makefile on September 9th 2000 by hubertf. You don't need cvs access to
> find this out - you can view it from the cvsweb interface
> (http://cvsweb.netbsd.org/bsdweb.cgi/).

Just to mention it, this is also linked at
www.netbsd.org/packages/mail/pine/, see the "history" link.
You want to have a look at the "Makefile". 


 - Hubert

-- 
Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>