On Mon, Oct 07, 2002 at 02:08:40PM +0200, Erwin Zierler wrote:
You can find mod_php4 packages for eMail Server II here:
ftp://ftp.suse.com/pub/suse/i386/products/emailserver/2.0/mod_php4/
The problem with this package is that it's timestamp is 5.8.2002 13:19 so I am afraid this is NOT the newest (and supposedly secured) version. What worries me even more is that for instance the mod_ssl rpm package in this directory is also dated 5.8.2002 13:19 so I find it hard to believe this is as up to date as
ftp://ftp.suse.de/pub/suse/i386/update/7.0/sec1/mod_ssl-2.8.2-41.i386.rpm
which is dated 17.9.2002 10:13.
But maybe I am wrong?
No, you're right. Your concerns are understandable. I have now checked back with our product management, since I wasn't sure about the status of eMail Server II. And the answer is that it is no longer "maintained". This means that we will continue to support it via our professional services, but we no longer provide security updates. Sorry I couldn't tell you this last time.
I have installed the regular apache (apache-1.3.19-115) i.e. the one for SuSE 7.0 on this system a while ago and the same is true for mod_*. The reason was that I could never find updated packages for eMail Server II.
[...]
And since it works fine for me, doesn't break the Horde interface for the IMAP server either I figured why not use the regual 7.0 packages. I have never seen any dependancy failures either.
If you can live with the regular 7.0 packages (with a few exceptions they should), then they might be the best solution for you in the short term. In the long term, you'll need to find another solution because at some time 7.0 will be unsupported, too. But maybe you can update your server to something more current, buy a new one, or at least use the most current RPMs (from the URL I mentioned) to add patches. Hope this helps, Peter -- Thought is limitation. Free your mind.