Bug#495581: this is fixed

2008-08-19 Thread Kevin Price
Thijs Kinkhorst schrieb: > I'm specifically concerned about this statement of yours: > >>> Justification: introduces a security hole on systems where you install >>> the packages > > That definately does not hold, but it may give the impression to users that > all systems running Postfix ar

Bug#495581: this is fixed

2008-08-19 Thread Thijs Kinkhorst
On Monday 18 August 2008 23:33, Kevin Price wrote: > > But in the future please be more > > careful when making statements about the impact of vulnerabilities. > > Please help me understand how you would have preferred me to report > this, so next time I can do it right. I'm specifically concerned

Bug#495581: this is fixed

2008-08-18 Thread Kevin Price
Thijs Kinkhorst schrieb: > Version: 2.3.8-2etch1 Ah, thank you. >> Justification: introduces a security hole on systems where you install >> the packages > > Huh? Have you read the author's announcement? It does no such thing on Debian > systems - it only introduces a local security hole o