Re: Mailman vulnerability //was [Eug-lug] test message

2004-06-10 Thread Bob Miller
[EMAIL PROTECTED] wrote: > Wow - NetBSD has only had eight so far this year: > http://netbsd.org/Security/ I was talking about the whole system. The Linux kernel has only had three this year (that I can recall). Since NetBSD's ports are basically the same software as Linux distributions use, it

Re: Mailman vulnerability //was [Eug-lug] test message

2004-06-10 Thread beaker
Cory Petkovsek <[EMAIL PROTECTED]> wrote: > On Thu, Jun 10, 2004 at 11:56:35AM -0700, Bob Miller wrote: > > Rationale: Security is hard to get right. The smallest error may be a > > potential exploit. (That's why we're seeing ~10 vulnerabilities a > > week these days.) ... > > ~10 a week? I see

Re: Mailman vulnerability //was [Eug-lug] test message

2004-06-10 Thread Cory Petkovsek
On Thu, Jun 10, 2004 at 11:56:35AM -0700, Bob Miller wrote: > Rationale: Security is hard to get right. The smallest error may be a > potential exploit. (That's why we're seeing ~10 vulnerabilities a > week these days.) If you pick and choose the fixes to install, you're > betting that you fully

Re: Mailman vulnerability //was [Eug-lug] test message

2004-06-10 Thread Bob Miller
horst wrote: > Bob, is that what you are referring to: > http://mail.python.org/pipermail/mailman-announce/2004-May/72.html Yes. > We are running 2.1.3 and I can't tell from > http://sourceforge.net/project/showfiles.php?group_id=103 > if we'd need a full install as there is no 2.1.3 patc

Mailman vulnerability //was [Eug-lug] test message

2004-06-10 Thread horst
In reply to: > Date: Wed, 9 Jun 2004 14:07:45 -0700 > From: Bob Miller <[EMAIL PROTECTED]> > Subject: [Eug-lug] test message ... > (I just updated euglug.org's mailman installation to plug the > recent security vulnerability. Bob, is that what you are referring to: http://mail.python.org/piperm