Re: Should we just remove openwebmail?
In debian-qa you wrote:
>> So I'm personally inclined not to let it linger for a while on the grounds
>> that it's got security issues, and just get it the hell out of the archive.
>> It's not like Debian's short of webmail packages.
>
> I stopped looking at this point. The code is rife with vulnerabilities, and
> needs to be audited line by line; I'm not sure this is likely anytime soon.
> I think we should remove it. (It can always be added back if it's fixed.)
Additionally it requires to be run with suidperl and the package currently
in sid even runs suid root.
Cheers,
Moritz
Reply to: