News for hackers. Stuff that matters.
Re:15 years later: remote code execution in qmail by stevekemp on Wednesday May 20, 2020 @01:27PM (#23249460)
qmail was essentially unmaintained for a long time, people were distributing patches to it, but there were no upstream releases.

(Similar story with djbdns/tinydns.)

"Recently" he released his code with new licenses, so that people could finally start distributing updated versions, rather than the previous approach where lots of people were sharing conflicting patches for various features (e.g. IPv6 support for AAAA records in tinydns.)

Re:15 years later: remote code execution in qmail by rurban on Wednesday May 20, 2020 @06:10PM (#23252565)
notqmail.org is for long the defacto maintained version. They had this fixed long time ago.