Re: OS Update 3/Qpopper & Security: Was: Re: [cobalt-security] URGENT Hacking

[Gossi The Dog <gossi@xxxxxxxxxxxxxx>]

On Thu, 7 Sep 2000, Michelle A. Hoyle wrote:

> >Message: 5
> >Date: Thu, 7 Sep 2000 19:27:46 +0100 (BST)
> >From: Gossi The Dog <gossi@xxxxxxxxxxxxxx>
> >To: cobalt-security@xxxxxxxxxxxxxxx
> >Subject: Re: [cobalt-security] URGENT Hacking
> >Reply-To: cobalt-security@xxxxxxxxxxxxxxx
> >
> >On Tue, 5 Sep 2000, Jeff Lovell wrote:
> >
> >  > Gossi The Dog wrote:
> >  >
> >  > > the issue.  The classic example is thats there's still no patch for
> >  > > qpopper, and so all Cobalt RaQ's are remotely ownable.  And its been this
> >  > > way for months now.  Hopefully one day Cobalt will realise they need
> >  > > somebody to be looking at things like this, or they are going to get some
> >  > > seriously bad PR :\
> >  >
> >  > What product are you using?
> >  >
> >  > http://www.cobalt.com/support/download/raq3.eng.html (6579)
> >  > http://www.cobalt.com/support/download/raq2.eng.html (OS Update 3)
> >  > http://www.cobalt.com/support/download/raq1.eng.html (6579)
> >  >
> >  >
> >  > Jeff
> >
> >My bad.  I hadn't checked the website before posting.
> >
> >Are these patches announced on any mailing lists out of interest?
> >
> >
> >
> I'd like to point out that the "upgrade" for the RaQ2 in fact breaks 
> POP mail completely.  There's an entire thread on the Cobalt Users 
> list about it.  The whole OS Update 3 upgrade has caused me nothing 
> but problems and I'd like to know, Jeff, why the upgrade hasn't been 
> pulled off the Cobalt download site?

In Cobalts defense, I'd like to point out that I've never (personally) had
any problems with the RaQ upgrades (including Update 3).  Maybe I'm lucky.