[Linux-users] Interesting .....

[Collins Richey]

Just a little commentary on a basic design flaw (according to those
who value security) with cups (now cupsys). The much maligned Ubuntu
developers (alas, the poor slackers don't even believe in the gospel
according to RH!) are trying to correct the flaw but getting little or
no support from upstream - cups developers don't even recognize the
problem.

Per Martin Pitt (debian/ubuntu developer).

"Our derooting patches will probably never make it upstream [1]

[1] Upstream basically denies that it is a problem to have a daemon
running as root which listens to the network and does an awful lot of
string and file processing and calling of external programs and
libraries."

Enjoy,

-- 
Collins Richey
     If you fill your heart with regrets of yesterday and the worries
     of tomorrow, you have no today to be thankful for.