[cobalt-users] qpopper update question (All Security 3.0.1-6579)

["Florian Effenberger" <florian.effenberger@xxxxxxxxxxxxx>]

Hello,

I want to install All Security 3.0.1-6579 ("This security package
contains an updated version of qpopper. The previous version of
qpopper could possibly allow an attacker who has access to a valid
account to obtain a shell with group-id 'mail', potentially allowing
read/write access to all mail").

I currently run the POP before SMTP package 1.2 on my RaQ3.

Anyone can give me a dummy proof guide to install the new version with
POP before SMTP support? Which POP before SMTP do I have to install?

ftp://ftp.cobaltnet.com/pub/contrib/binaries/RaQ3-POP-before-Relay-1.2
-4.pkg
or
ftp://ftp.cobaltnet.com/pub/contrib/binaries/RaQ4-RaQ3-POP-before-Rela
y-1.3pre2.pkg

Do I have to deinstall the old one (1.2) first? In which order do Ii
have to (de)install?

Thanks so much!
Florian