Re: Retiring lpr and lpd

--Sig_/H.BM5_wDhM0_N.mBOQSNVIE
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

Am 26.02.2026 um 06:57:55 Uhr schrieb Rick Macklem:

> I disagree. As Julian noted, some sort of warning w.r.t. known
> security vulnerabilities is sufficient, I think.

I have serious doubt that this is sufficient.
The normal way is to fix them - or remove such software if it is
abandoned. People can still get the code and install it, but it
shouldn't be part of a default installation.

> Security, like safety, is not an absolute. It requires a user/sysadmin
> to evaluate the risks and make an informed decision on what to run
> and how to do it.

If a software has serious bugs that let remote users exploit them, it
can only be used in an environment where only trusted machines and
users can act.

--=20
kind regards
Marco

Send unsolicited bulk mail to [email protected]

--Sig_/H.BM5_wDhM0_N.mBOQSNVIE
Content-Type: application/pgp-signature
Content-Description: Digitale Signatur von OpenPGP

-----BEGIN PGP SIGNATURE-----
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=svpW
-----END PGP SIGNATURE-----

--Sig_/H.BM5_wDhM0_N.mBOQSNVIE--