From: Gabor Gombas (no email)
Date: Thu Nov 08 2007 - 11:55:09 EST
On Thu, Nov 08, 2007 at 06:39:45AM -0500, Ken Murchison wrote:
> That's friggin' great! We can't exactly force people to have a
> particular version of glibc just to run Cyrus 2.3.10. Either we need to
> come up with something that will run on all systems, or I'll be inclined
> to remove the getgrouplist() code.
A quick search shows that at least Redhat, Mandrake and Gentoo issued
security updates for this bug in Nov 2003; I'm pretty sure all other
distros did the same. I do not think it is worth worrying about people
who have not installed a security update for 4 years...
IMHO if you want to avoid libc functions that had some bug on one system
or other in the past then you will likely have to re-implement most of
the C library...
Gabor
--
---------------------------------------------------------
MTA SZTAKI Computer and Automation Research Institute
Hungarian Academy of Sciences
---------------------------------------------------------
----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
|
|
|