This was forwarded to me by our security officer. I believe the original
author, Florian Weimer, intended to reach this list but did not know how
to and instead went through his security contacts. Perhaps Florian's
concerns would best be addressed in MM 3.0 and maybe this should be
added to the MM 3.0 feature list. BTW, is there an independent MM 3.0
list? I thought I had heard such a beast existed, but my recollection is
hazy.
--
John Dennis <jdennis(a)redhat.com>