[linux-security] Re: IMAPD fix for RH

[djb redhat com]

> It appears that uninstalling the imap rpm uninstalls the pop mail service as
> well, or at least disables it.  Is this uncool?  Is it safe to leave it
> installed (but removed from inetd.conf) for the sake of keeping pop service in
> place?

I'm not sure, actually.  The POP code comes from the imap package, so
presumably you need to updated it *all* if you use any of it to make
sure you are safe from attack.  

I'd just update the package to the latest one and leave imap enabled.


--Donnie

--
 Donnie Barnes    http://www.redhat.com/~djb    djb redhat com   "Bah."
   Challenge Diversity.  Ignore People.  Live Life.  Use Linux.  879.
My Dad used to say I have deceptive quickness.  I'm slower than I look.