On Sat, Sep 22, 2001 at 05:21:24PM +0400, Andrey A. Chernov wrote:
> On Sat, Sep 22, 2001 at 15:11:07 +0200, Alexander Langer wrote:
> > Thus spake Andrey A. Chernov ([EMAIL PROTECTED]):
> >
> > > Please, read me carefully. This bug not exist in -current, where it is
> > > disabled by mistake via commit I complain. I not test other branches, I
> >
> > Err, the bugtraq message explicelty says "4.4". Even worse if it only
> > exists in the production-branch.
>
> Well, to be more carefull I'll need to say that it is hoax _for_-current_
> as described.
>
> Proper move will be MFC -current login_cap variant to other branches, not
> disabling & not testing rush.
This problem was reported to us at almost literally the very last
minute..it was after Jordan had slipped several release dates already,
and at least one of those postponements was because other security
problems. There was no time to do a more thorough fix; now that the
release is out we can revisit it, as was the intention all along.
Kris
PGP signature
