Re: tasks

[Michael Stone <mstone@debian.org>]

On Fri, Jan 14, 2000 at 07:06:17AM -0500, Jaldhar H. Vyas wrote:
> On Fri, 14 Jan 2000, Michael Stone wrote:
> > OTOH, uw imapd is a security nightmare that comes back to bite another
> > popular distribution with a new remote root exploit every six months or
> > so.
> 
> Could you back this allegation up with some facts?  A _long_ time ago
> there was a notorious root exploit which as the bane of Red Hat users
> everywhere but the Debian package was immune.  (This was back when Dwarf
> maintained it I believe.)  Since I took over the only security problem
> I've had to fix was an exploit in ipop2d.

ipop2d is the same source, same authors. Barring a formal proof of
correctness, past history and apparant attention to security is a valid
way of evaluating the package. I was a bit off on my six months
estimate, but there were security fixes released in Mar '97, Jul '98,
and Jun '99. About once a year. My alternative thus far has been pop.

-- 
Mike Stone