Your message dated Thu, 5 May 2005 16:22:20 +0100
with message-id <[EMAIL PROTECTED]>
and subject line Removed
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 21 Jan 2005 00:25:58 +0000
>From [EMAIL PROTECTED] Thu Jan 20 16:25:58 2005
Return-path: <[EMAIL PROTECTED]>
Received: from tornado.dat.etsit.upm.es (dat.etsit.upm.es) [138.100.17.73]
by spohr.debian.org with smtp (Exim 3.35 1 (Debian))
id 1Crmcf-0004Ry-00; Thu, 20 Jan 2005 16:25:57 -0800
Received: (qmail 27814 invoked by uid 1013); 21 Jan 2005 00:25:56 -0000
Date: Fri, 21 Jan 2005 01:25:56 +0100
From: Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?= <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Openwebmail: insecure temporary filename usage in many CGI scripts
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="SFyWQ0h3ruR435lw"
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no
version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
--SFyWQ0h3ruR435lw
Content-Type: multipart/mixed; boundary="TiqCXmo5T1hvSQQg"
Content-Disposition: inline
--TiqCXmo5T1hvSQQg
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Package: openwebmail
Priority: grave
Version: 2.41-10
Tags: patch security
Openwebmail has multiple unsafe usages of temporary files (in /tmp) which=
=20
lead to race conditions and symlink attacks. There are actually a lot of=20
Perl scripts that, instead of using Perl's builtin File::Temp module use=20
the (insecure) /tmp/SOMETHING.$$$ construct to define temporary files.
Attached is a patch fixing some of these issues, it doesn't fix all of=20
them, however. To find remaining issues please run 'grep -r "/tmp" .' on=20
the source directory. The patch should provide hints on how to properly fix=
=20
all of these.
IMHO these bugs together with #290848 show that there has been no effort to
prevent security bugs and makes this package unsuitable for release with
sarge. I don't think this package should be included in a Debian release
unless a full audit has been conducted in the sources for common web=20
programming mistakes.
Regards
Javier
--TiqCXmo5T1hvSQQg
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="openwebmail.tmp.diff"
Content-Transfer-Encoding: quoted-printable
diff -Nru openwebmail-2.41.orig/cgi-bin/openwebmail/misc/mkrelease/mkcurren=
t.sh openwebmail-2.41/cgi-bin/openwebmail/misc/mkrelease/mkcurrent.sh
--- openwebmail-2.41.orig/cgi-bin/openwebmail/misc/mkrelease/mkcurrent.sh
2=
004-08-05 05:07:27.000000000 +0200
+++ openwebmail-2.41/cgi-bin/openwebmail/misc/mkrelease/mkcurrent.sh 2005-0=
1-21 01:12:54.000000000 +0100
@@ -3,9 +3,8 @@
# this is used by author to create the tarball of openwebmail
#
=20
-tmpdir=3D/tmp/openwebmail.mkrelease.tmp
-rm -Rf $tmpdir
-mkdir $tmpdir
+tmpdir=3D`mktemp -d openwebmail.mkrelease.XXXXXX` || { echo "$0: Cannot cr=
eate temporary directory" >&2 ; exit 1; }
+trap "rm -rf $tmpdir" 0 1 2 3 13 15
cd $tmpdir
=20
q /usr/local/www/cgi-bin/openwebmail/etc/defaults/openwebmail.conf
@@ -193,10 +192,11 @@
echo copy current to snapshot $version-$releasedate...
cd /usr/local/www/data/openwebmail/download/snapshot
cp /usr/local/www/data/openwebmail/download/current/openwebmail-current.=
tar.gz openwebmail-$version-$releasedate.tar.gz=20
- grep -v $releasedate MD5SUM >/tmp/.md5.tmp.$$
- md5 -r openwebmail-$version-$releasedate.tar.gz >> /tmp/.md5.tmp.$$
- cp /tmp/.md5.tmp.$$ MD5SUM
- rm /tmp/.md5.tmp.$$
+ md5file=3D`mktemp -t .md5.tmp.XXXXXX` || { echo "$0: Cannot create tempo=
rary file" >&2; exit 1; }
+ grep -v $releasedate MD5SUM >$md5file
+ md5 -r openwebmail-$version-$releasedate.tar.gz >> $md5file
+ cp $md5file MD5SUM
+ rm -f $md5file=20
fi
=20
#################################################################
diff -Nru openwebmail-2.41.orig/cgi-bin/openwebmail/misc/mkrelease/notify.s=
h openwebmail-2.41/cgi-bin/openwebmail/misc/mkrelease/notify.sh
--- openwebmail-2.41.orig/cgi-bin/openwebmail/misc/mkrelease/notify.sh 2004=
-09-21 18:09:31.000000000 +0200
+++ openwebmail-2.41/cgi-bin/openwebmail/misc/mkrelease/notify.sh
2005-01-2=
1 01:10:02.000000000 +0100
@@ -115,6 +115,8 @@
echo "send release announcement to port maintainer? (y/N)"
read ans
if [ "$ans" =3D "y" -o "$ans" =3D "Y" ]; then
+ notify=3D`mktemp -t notify.XXXXXX` || { echo "$0: Cannot create temporar=
y file" >&2; exit 1; }
+ trap "rm -f $notify" 0 1 2 3 13 15
echo "Dear sir,
=20
The new release of Open WebMail is available now.
@@ -132,17 +134,16 @@
Best Regards.
=20
tung
-" >/tmp/notify.tmp.$$
+" >$notify
=20
- q /tmp/notify.tmp.$$
+ q $notify
=20
echo "Really send release announcement to port maintainer? (y/N)"
read ans
if [ "$ans" =3D "y" -o "$ans" =3D "Y" ]; then
echo sending to pkg/port maintainer...
- cat /tmp/notify.tmp.$$| \
+ cat $notify| \
/usr/local/bin/mutt -s "OWM new release announcement" \
$cobalt $freebsd $openbsd $debian $webmin $ipspace
fi
- rm /tmp/notify.tmp.$$
fi
diff -Nru openwebmail-2.41.orig/cgi-bin/openwebmail/misc/test/dbmtest.pl op=
enwebmail-2.41/cgi-bin/openwebmail/misc/test/dbmtest.pl
--- openwebmail-2.41.orig/cgi-bin/openwebmail/misc/test/dbmtest.pl
2004-07-=
07 15:22:13.000000000 +0200
+++ openwebmail-2.41/cgi-bin/openwebmail/misc/test/dbmtest.pl 2005-01-21 01=
:07:52.000000000 +0100
@@ -5,6 +5,7 @@
use strict;
use Fcntl qw(:DEFAULT :flock);
use FileHandle;
+use File::Temp qw/tempfile tempdir/;
=20
print "\n";
=20
@@ -21,9 +22,10 @@
=20
sub check_tell_bug {
my $offset;
- my $testfile=3D"/tmp/testfile.$$";
+ my ($testh, $testfile) =3D tempfile ("testfile.XXXXXX");
($testfile =3D~ /^(.+)$/) && ($testfile =3D $1);
=20
+ close $testh;
open(F, ">$testfile"); print F "test"; close(F);
open(F, ">>$testfile"); $offset=3Dtell(F); close(F);
unlink($testfile);
@@ -42,18 +44,17 @@
sub guessoptions {
my (%DB, @filelist, @delfiles);
my ($dbm_ext, $dbmopen_ext, $dbmopen_haslock);
+ my $dbmdir =3D tempdir("dbmtest.XXXXXX");
=20
- mkdir ("/tmp/dbmtest.$$", 0755);
-
- dbmopen(%DB, "/tmp/dbmtest.$$/test", 0600); dbmclose(%DB);
+ dbmopen(%DB, "$dbmdir/test", 0600); dbmclose(%DB);
=20
@delfiles=3D();
- opendir(TESTDIR, "/tmp/dbmtest.$$");
+ opendir(TESTDIR, "$dbmdir");
while (defined(my $filename =3D readdir(TESTDIR))) {
($filename =3D~ /^(.+)$/) && ($filename =3D $1); # untaint ...
if ($filename!~/^\./ ) {
push(@filelist, $filename);
- push(@delfiles, "/tmp/dbmtest.$$/$filename");
+ push(@delfiles, $dbmdir."/$filename");
}
}
closedir(TESTDIR);
@@ -67,11 +68,11 @@
}
=20
my $result;
- flock_lock("/tmp/dbmtest.$$/test$dbm_ext", LOCK_EX);
+ flock_lock($dbmdir."/test$dbm_ext", LOCK_EX);
eval {
local $SIG{ALRM} =3D sub { die "alarm\n" }; # NB: \n required
alarm 5; # timeout 5 sec
- $result =3D dbmopen(%DB, "/tmp/dbmtest.$$/test$dbmopen_ext", 0600);
+ $result =3D dbmopen(%DB, $dbmdir."/test$dbmopen_ext", 0600);
dbmclose(%DB) if ($result);
alarm 0;
};
@@ -80,18 +81,18 @@
} else {
$dbmopen_haslock=3D0;
}
- flock_lock("/tmp/dbmtest.$$/test$dbm_ext", LOCK_UN);
+ flock_lock($dbmdir."/test$dbm_ext", LOCK_UN);
=20
@delfiles=3D();
- opendir(TESTDIR, "/tmp/dbmtest.$$");
+ opendir(TESTDIR, "$dbmdir");
while (defined(my $filename =3D readdir(TESTDIR))) {
($filename =3D~ /^(.+)$/) && ($filename =3D $1); # untaint ...
- push(@delfiles, "/tmp/dbmtest.$$/$filename") if ($filename!~/^\./ );
+ push(@delfiles, $dbmdir."/$filename") if ($filename!~/^\./ );
}
closedir(TESTDIR);
unlink(@delfiles) if ($#delfiles>=3D0);
=20
- rmdir("/tmp/dbmtest.$$");
+ rmdir("$dbmdir");
=20
return($dbm_ext, $dbmopen_ext, $dbmopen_haslock);
}
diff -Nru openwebmail-2.41.orig/cgi-bin/openwebmail/misc/tools/mkcool3d/mkc=
ool3d_en.sh openwebmail-2.41/cgi-bin/openwebmail/misc/tools/mkcool3d/mkcool=
3d_en.sh
--- openwebmail-2.41.orig/cgi-bin/openwebmail/misc/tools/mkcool3d/mkcool3d_=
en.sh 2004-08-06 20:18:24.000000000 +0200
+++ openwebmail-2.41/cgi-bin/openwebmail/misc/tools/mkcool3d/mkcool3d_en.sh=
2005-01-21 01:15:27.000000000 +0100
@@ -9,6 +9,10 @@
=20
# choose the destination dir of icons
DEST=3DCool3D.English
+# Temporary directory
+ROOT=3D`mktemp -d cool.XXXXXX` || { echo "$0: Cannot create temporary dire=
ctory" >&2; exit 1; }
+trap "rm -rf $ROOT" 0 1 2 3 13 15
+
=20
#
# BEGIN OF SCRIPT
@@ -22,11 +26,11 @@
STARTICON=3D$2
=20
BLANKICON=3DCool3D/blank.gif
- GBASEFILE=3D/tmp/base
- GCUTFILE=3D/tmp/cut
- GTEXTFILE=3D/tmp/text
- GFINALFILE=3D/tmp/final
- GALPHAFILE=3D/tmp/alpha
+ GBASEFILE=3D$ROOT/base
+ GCUTFILE=3D$ROOT/cut
+ GTEXTFILE=3D$ROOT/text
+ GFINALFILE=3D$ROOT/final
+ GALPHAFILE=3D$ROOT/alpha
=20
# find transparent color (must be imposed because in blank.gif
transparen=
t color is not defined)
# TRCOLOR=3D`giftopnm -verbose $BLANKICON 2>&1 | head -n 1 | cut -s -d "
"=
-f 5 | cut -s -d ":" -f 2 | tr -d /`
Los ficheros binarios openwebmail-2.41.orig/cgi-bin/openwebmail/misc/tools/=
mkcool3d/.mkcool3d_en.sh.swp y openwebmail-2.41/cgi-bin/openwebmail/misc/to=
ols/mkcool3d/.mkcool3d_en.sh.swp son distintos
diff -Nru openwebmail-2.41.orig/cgi-bin/openwebmail/misc/tools/mkcool3d/mkc=
ool3d.sh openwebmail-2.41/cgi-bin/openwebmail/misc/tools/mkcool3d/mkcool3d.=
sh
--- openwebmail-2.41.orig/cgi-bin/openwebmail/misc/tools/mkcool3d/mkcool3d.=
sh 2004-08-06 20:18:24.000000000 +0200
+++ openwebmail-2.41/cgi-bin/openwebmail/misc/tools/mkcool3d/mkcool3d.sh
20=
05-01-21 01:14:36.000000000 +0100
@@ -79,7 +79,8 @@
fi
=20
# Temporary directory
-ROOT=3D/tmp
+ROOT=3D`mktemp -d cool.XXXXXX` || { echo "$0: Cannot create temporary dire=
ctory" >&2; exit 1; }
+trap "rm -rf $ROOT" 0 1 2 3 13 15
=20
# Destination dir of icons
DEST=3DCool3D.$LANGLONG
diff -Nru openwebmail-2.41.orig/cgi-bin/openwebmail/openwebmail-folder.pl o=
penwebmail-2.41/cgi-bin/openwebmail/openwebmail-folder.pl
--- openwebmail-2.41.orig/cgi-bin/openwebmail/openwebmail-folder.pl 2005-01=
-21 00:43:15.000000000 +0100
+++ openwebmail-2.41/cgi-bin/openwebmail/openwebmail-folder.pl 2005-01-21 0=
0:57:12.000000000 +0100
@@ -18,6 +18,7 @@
use Fcntl qw(:DEFAULT :flock);
use CGI qw(-private_tempfiles :standard);
use CGI::Carp qw(fatalsToBrowser carpout);
+use File::Temp qw/tempfile/;
=20
require "modules/dbm.pl";
require "modules/suid.pl";
@@ -354,13 +355,15 @@
ow::dbm::close(\%FDB, $folderdb);
my @unreadmsgids=3D(sort { $offset{$a}<=3D>$offset{$b} } keys %offset);
=20
- my $tmpfile=3Dow::tool::untaint("/tmp/.markread.tmpfile.$$");
- my $tmpdb=3Dow::tool::untaint("/tmp/.markread.tmpdb.$$");
+ my ($tmpfh, $tmpfile ) =3D tempfile(".markread.tmpfile.XXXXXX");
+ my ($tmpdbh, $tmpdb ) =3D tempfile(".markread.tmpdb.XXXXXX");
+ $tmpfile=3Dow::tool::untaint($tmpfile);
+ $tmpdb=3Dow::tool::untaint($tmpdb);
=20
while (!$ioerr && $#unreadmsgids>=3D0) {
my @markids=3D();
=20
- open(F, ">$tmpfile"); close(F);
+ close $tmpfh;
ow::filelock::lock($tmpfile, LOCK_EX) or
openwebmailerror(__FILE__, __LINE__, "$lang_err{'couldnt_lock'} $=
tmpfile");
=20
diff -Nru openwebmail-2.41.orig/cgi-bin/openwebmail/openwebmail-send.pl ope=
nwebmail-2.41/cgi-bin/openwebmail/openwebmail-send.pl
--- openwebmail-2.41.orig/cgi-bin/openwebmail/openwebmail-send.pl
2005-01-2=
1 00:43:15.000000000 +0100
+++ openwebmail-2.41/cgi-bin/openwebmail/openwebmail-send.pl 2005-01-21 00:=
54:34.000000000 +0100
@@ -21,6 +21,7 @@
use MIME::Base64;
use MIME::QuotedPrint;
use Net::SMTP;
+use File::Temp qw/tempfile/;
=20
require "modules/dbm.pl";
require "modules/suid.pl";
@@ -1578,7 +1579,7 @@
my $saveerr=3D0;
=20
my $smtp;
- my $smtperrfile=3D"/tmp/.openwebmail.smtperr.$$";
+ my ($smtperrh, $smtperrfile) =3D tempfile ("openwebmail.smtperr.XXXXXX"=
);
local (*STDERR); # localize stderr to a new global variable
=20
my ($savefolder, $savefile, $savedb);
@@ -1613,6 +1614,7 @@
=20
# redirect stderr to smtperrfile
$smtperrfile=3Dow::tool::untaint($smtperrfile);
+ close $smtperrh;
open(STDERR, ">$smtperrfile");
select(STDERR); local $| =3D 1; select(STDOUT);
=20
diff -Nru openwebmail-2.41.orig/cgi-bin/openwebmail/openwebmail-tool.pl ope=
nwebmail-2.41/cgi-bin/openwebmail/openwebmail-tool.pl
--- openwebmail-2.41.orig/cgi-bin/openwebmail/openwebmail-tool.pl
2005-01-2=
1 00:43:15.000000000 +0100
+++ openwebmail-2.41/cgi-bin/openwebmail/openwebmail-tool.pl 2005-01-21 00:=
52:08.000000000 +0100
@@ -28,6 +28,7 @@
use strict;
use Fcntl qw(:DEFAULT :flock);
use Net::SMTP;
+use File::Temp qw/tempfile/;
=20
require "modules/dbm.pl";
require "modules/suid.pl";
@@ -347,9 +348,8 @@
=20
sub check_tell_bug {
my $offset;
- my $testfile=3Dow::tool::untaint("/tmp/testfile.$$");
-
- open(F, ">$testfile"); print F "test"; close(F);
+ my ($testh, $testfile) =3D tempfile ( "testfile.XXXXXX");
+ print $testh "test"; close $testh;
open(F, ">>$testfile"); $offset=3Dtell(F); close(F);
unlink($testfile);
=20
diff -Nru openwebmail-2.41.orig/cgi-bin/openwebmail/openwebmail-viewatt.pl =
openwebmail-2.41/cgi-bin/openwebmail/openwebmail-viewatt.pl
--- openwebmail-2.41.orig/cgi-bin/openwebmail/openwebmail-viewatt.pl 2005-0=
1-21 00:43:15.000000000 +0100
+++ openwebmail-2.41/cgi-bin/openwebmail/openwebmail-viewatt.pl 2005-01-21 =
00:50:06.000000000 +0100
@@ -20,6 +20,7 @@
use CGI::Carp qw(fatalsToBrowser carpout);
use MIME::Base64;
use MIME::QuotedPrint;
+use File::Temp;
=20
require "modules/dbm.pl";
require "modules/suid.pl";
@@ -420,11 +421,10 @@
my $antiwordbin=3Dow::tool::findbin('antiword');
return 0 if ($antiwordbin eq '');
=20
- my $tmpfile=3Dow::tool::untaint("/tmp/.msword2html.tmpfile.$$");
+ my ($tmph, $tmpfile) =3D tempfile ( "msword2html.XXXXXX" );
my $err=3D0;
- open(F, ">$tmpfile") or return 0;
- print F ${$r_content} or $err++;
- close(F);
+ print $tmph ${$r_content} or $err++;
+ close $tmph;
if ($err) {
unlink($tmpfile);
return 0;
diff -Nru openwebmail-2.41.orig/cgi-bin/openwebmail/vacation.pl openwebmail=
-2.41/cgi-bin/openwebmail/vacation.pl
--- openwebmail-2.41.orig/cgi-bin/openwebmail/vacation.pl 2004-08-18
11:34:=
47.000000000 +0200
+++ openwebmail-2.41/cgi-bin/openwebmail/vacation.pl 2005-01-21 01:01:30.00=
0000000 +0100
@@ -38,7 +38,7 @@
# -p homepath Specify a directory for the user home.
# (mostly for virtual user with no real unix home)
#
-# -d log debug information to /tmp/vacation.debug
+# -d log debug information to $TMPDIR/vacation.debug
#
# The options -a and -f can be specified for more than one times.
#
@@ -74,6 +74,7 @@
#
=20
use strict;
+use File::Spec;
foreach (qw(ENV BASH_ENV CDPATH IFS TERM)) {delete $ENV{$_}}; $ENV{PATH}=
=3D'/bin:/usr/bin'; # secure ENV
=20
my $myname =3D $0;
@@ -131,7 +132,7 @@
$_ =3D shift;
if (/^-I/i) { # eric allman's source has both cases
$opt_i=3D1;
- } elsif (/^-d/) { # log debug information to /tmp/vacation.debug
+ } elsif (/^-d/) { # log debug information to $TMPDIR/vacation.debug
$opt_d=3D1;
} elsif (/^-j/) { # don't check if user is a valid receiver
$opt_j=3D1;
@@ -589,12 +590,17 @@
my @[EMAIL PROTECTED];
my ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst);
my ($today, $time);
+ # Use tmpdir which helps users prevent symlink attacks
+ # if they set $TMPDIR properly
+ my $tmpdir =3D File::Spec->tmpdir();
+ my $debugfile =3D $tmpdir."/vacation.debug";
=20
($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) =3Dlocaltime;
$today=3Dsprintf("%4d%02d%02d", $year+1900, $mon+1, $mday);
$time=3Dsprintf("%02d%02d%02d",$hour,$min, $sec);
=20
- open(Z, ">> /tmp/vacation.debug");
+ # Not safe if tmpdir is in an unsafe location
+ open(Z, ">> $debugfile");
=20
# unbuffer mode
select(Z); local $| =3D 1;
@@ -603,6 +609,6 @@
print Z "$today $time ", join(" ",@msg), "\n";
close(Z);
=20
- chmod(0666, "/tmp/vacation.debug");
+ chmod(0666, "$debugfile");
}
=20
--TiqCXmo5T1hvSQQg--
--SFyWQ0h3ruR435lw
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFB8EwTi4sehJTrj0oRAu5xAJ4u/kvB2hUxy27zczwFh0B9zS4yIwCfapW5
V4qnlhwBwZ7cTmdfUXf0/uo=
=qtWn
-----END PGP SIGNATURE-----
--SFyWQ0h3ruR435lw--
---------------------------------------
Received: (at 291478-done) by bugs.debian.org; 5 May 2005 15:22:31 +0000
>From [EMAIL PROTECTED] Thu May 05 08:22:30 2005
Return-path: <[EMAIL PROTECTED]>
Received: from sorrow.cyrius.com [65.19.161.204]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DTiBJ-0008Si-00; Thu, 05 May 2005 08:22:29 -0700
Received: by sorrow.cyrius.com (Postfix, from userid 10)
id 5011464D4F; Thu, 5 May 2005 15:22:29 +0000 (UTC)
Received: by derision.cyrius.com (Postfix, from userid 1000)
id BCE9A780D0; Thu, 5 May 2005 16:22:20 +0100 (BST)
Date: Thu, 5 May 2005 16:22:20 +0100
From: Martin Michlmayr <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED]
Subject: Removed
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-1.0 required=4.0 tests=BAYES_00,ONEWORD,
SORTED_RECIPS autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
X-CrossAssassin-Score: 9
openwebmail has been removed from Debian because it had no Debian
maintainer and because it has a number of security holes.
--
Martin Michlmayr
http://www.cyrius.com/
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
