Package: uw-imapd
Version: 7:2002edebian1-8
Severity: normal
this text from debconf:
"The ports selected for enabling may be overridden by locally configured
services. By default the port selection is x
respected only on initial installs, and is ignored on later
reconfiguration. x
Do you want to ignore possible local tweaks and always use
selected ports? x
Enforce port selection? "
...is extremely unclear. this prompt asks whether people want to
reconfigure the ports on which IMAP listens on, which may have security
implications for the system being used. this prompt DESPERATELY needs
to be rewritten in a more clear, explanatory, detailed way.
i am filing this bug as a critical security bug because of the strong
possibility that folks will make bad decisions based on the unclear
prompt.
Please fix ASAP.
thanks,
--elijah
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages uw-imapd depends on:
ii debconf 1.4.47 Debian configuration management sy
ii libc-client2002edebian 7:2002edebian1-8 UW c-client library for mail proto
ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an
ii libcomerr2 1.37-1 common error description library
ii libkrb53 1.3.6-1 MIT Kerberos runtime libraries
ii libpam-runtime 0.76-22 Runtime support for the PAM librar
ii libpam0g 0.76-22 Pluggable Authentication Modules l
ii libssl0.9.7 0.9.7e-3 SSL shared libraries
ii openssl 0.9.7e-3 Secure Socket Layer (SSL) binary a
-- debconf information:
* uw-imapd/protocol: imap2, imap3, imaps
* uw-imapd/force_debconf_choice: false
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
