Stuart Henderson wrote: > On 2016/03/17 21:13, Michael McConville wrote: > > I won't be so long-winded on this one, but basically: > > > > o it has patches removing gets(3) > > o it hasn't been updated since 1997 > > o the source files are timestamped 1993-94 > > o it's obviously exposed to untrusted data (and MIME data at that) > > > > Any objections for removing it? > > Hylafax and exmh use this.
Could mail/exmh2 go too? The last release was in 2004, and its dependence on mail/metamail doesn't speak well of its security. It's a "Tcl/Tk interface to the MH mail system", which seems niche.
