On Fri, Jun 13, 2008 at 01:26:00PM +0100, Adrian Portelli wrote: > >would anybody object if I update the "dircproxy" package to version > >1.2.0-beta2 and remove the "dircproxy-devel" package? > > > >The "dircproxy" package contains a remote DoS security vulnerability > >and it seems unlikely that this will get fixed ever. The version in > >"dirproxy-devel" has the necessary fix and I have been using it > >without any problems for month. > Please do. It's done: http://mail-index.netbsd.org/pkgsrc-changes/2008/06/17/msg006736.html Kind regards -- Matthias Scheler http://zhadum.org.uk/
Attachment:
pgpnRlz9YC61x.pgp
Description: PGP signature