Re: Mark boa unsupported ?

2017-06-30 Thread Raphael Hertzog
Hi, On Fri, 30 Jun 2017, Hugo Lefeuvre wrote: > I just had a look at boa, which is affected by CVE-2017-9833. > > IMHO, I do not think it's worth taking time for this completely > outdated, single-tasking, potentially dangerous webserver. It hasn't > seen an update for 12+ years (last rc 2005?),

Mark boa unsupported ?

2017-06-30 Thread Hugo Lefeuvre
Hi, I just had a look at boa, which is affected by CVE-2017-9833. IMHO, I do not think it's worth taking time for this completely outdated, single-tasking, potentially dangerous webserver. It hasn't seen an update for 12+ years (last rc 2005?), doesn't support SSL, access authentication, etc.