e34953ed8d
Within the top-level Makefile of the distribution file, and as part of the install target, this software decides to send, without warning, a little "I've been installed" love note to its developers. The doc/install.txt has the usual blurb about not using addresses "acquired" in this manner etc.. etc.. It's also not entirely clear, and nor have the developers responded (curiously, you think'd they'd be in to the email thang), whether this can be automatically patched around. Possibly worthy of a full-blown Ports Security Notification, I haven't heard anything back from Bugtraq. Submitted by: my laptop having a broken MTA :) Discussed with: kris (a little tiny amount -- don't blame him, blame me) |
||
---|---|---|
.. | ||
distinfo | ||
Makefile | ||
pkg-comment | ||
pkg-descr | ||
pkg-plist |