I'm orphaning arc in Fedora Extras

[Nicolas Mailhot]

Le samedi 08 octobre 2005 à 07:20 -0700, Howard Chu a écrit :
> Nicolas Mailhot wrote:
> > Hi,
> > 
> > I'm officially orphaning arc.
> 
> Sounds fine. I've always wondered why anybody still used it these days, 
> with its 11-character limit on filenames and such. I wrote the darn Unix 
> port and I stopped using it years ago.

All the damn legacy archiving formats must be maintained forever in
mail/file content scanners so they're not used as a malware enveloppe.
(But only the uncompress path is needed)

The problem is all the legacy archivers have often not been subjected to
a modern security audit, so they are a security risk themselves (both in
FOSS and commercial scanners, arc problems endanger amavis but some
commercial software was also subjected to an arj attack lately).

Regards,

-- 
Nicolas Mailhot
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: Ceci est une partie de message num?riquement sign?e
URL: <http://listman.redhat.com/archives/fedora-extras-list/attachments/20051008/db6959b9/attachment.sig>