OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: gpm-root
From: ADAM Sulmicki (adamCFAR.UMD.EDU)
Date: Wed Mar 22 2000 - 17:35:53 CST

> I've sent report about the following security hole to the
> authors of gpm, but they seemed to ignore the problem. The
> problem applies to every gpm version known by me, for
> example 1.18.1 and 1.19.0.

Well, if you would check README in 1.19.0 version, you would notice
following fragment:

        =========== MAINTAINANCE
        As of 1.19.0, gpm is officially unmaintained. I can't do it any more,
        and nobody expressed interest in it.

So I don't think it is fair to blame someone who spent a great deal of
their time doing gpm and has just quit it. Instead of blaming them
how about making up a patch and telling everybody "here's a patch
which fixes this problem".

FWIW,

Adam