Hi Selcuk,

Is anybody from Suse reading this list at all or is this for the users to discuss things between themselves? Sometimes someone from SuSE sends/answers a message (though rarely), except for security messages. (SuSE is fast creating fixed patches, but it is slow to make them known!)

I sent a message to support@suse.com about the latest CERT advisory for wu-ftpd. The response was 'please don't send any messages concerning this issue here'. They suggested 'feedback@suse.de' and this list here. I wrote to both and after 2 weekes not a peep. Try: ftp://ftp.suse.com/pub/suse/i386/update/6.2/n1/ ! wuftpd.rpm This package contains two versions of wuftpd: ! the old, but security fixed wu-ftpd-2.4.2-beta-18 and the ! actual wuftpd-2.6.0. Default is the old one. (This version is from Thu Nov 4 17:02:00 1999, but I think there was an earlier one.)

I am very disappointed in Suse. From now on, I will never purchase anything from Suse and will try to discourage anybody else from making the same mistake on any public forum I am a participant. I think you are slightly to critical of SuSE, but I have to admitt that SuSE should make such fixes better known (the mailing list is usually better informed than

Unfortunally there is _NO_ information on: http://www.suse.de/en/support/security/index.html http://www.suse.de/en/support/download/updates/62_update.html I suggest: http://filewatcher.org/cat/Distribution___SuSE/ but I have to admitt this isn't optimal. the web pages up to date, but this announcement of WU-FTPD is still missing. (Personally I think SuSE should also make such programs as newer Netscape versions available, since this program contains also some secutity fixes.) Regards, Tobias