[Mailman-Users] any info on this reported exploit?

[Mark Sapiro]

Jim Popovitch wrote:
>
>OK, but what about the next one?   What do Mailman system admins do, wait?

Yes, I think so. The alternative is everyone goes off half-cocked and
you have a situation such as occurred about a year ago with the
CAN-2005-0202 issue <http://www.list.org/security.html>. In this case,
someone developed a patch which SuSE pushed out through their
automatic update process, but the patch was dependent on a part of the
Python library that SuSE didn't install by default and the dependency
wasn't noted. This caused a lot of grief at the time. See
<http://www.google.com/search?hl=en&q=site%3Amail.python.org++inurl%3Amailman-users+suse+sax>.

-- 
Mark Sapiro <msapiro at value.net>       The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan