lug-bg: Sendmail vulnerability

[kangelov@xxxxxxxxxxx (Konstantin Angelov)]

Just an FYI. Proverqvaite za patch po chesto ot tuk natatuka - ne se znae
tochno koga shte izleze oficialno tazi informacia na bql svqt

[snip]

[02:35pm]<rrognlie> hey
[02:35pm]<rrognlie> yes, I know
[02:35pm]<rrognlie> and I've been sworn to not reveal anything until
either 1) it
                    leaks through back channels
[02:36pm]<rrognlie> or 2) it gets released publicly...
[02:36pm]<rrognlie> it's nasty.
[02:36pm]<rrognlie> s/nasty/potentially/
[02:36pm]<jeffw> any idea when we'll see a patch?
[02:36pm]<rrognlie> the patch is done
[02:36pm]<rrognlie> but we can't release it until it's announced
[02:37pm]<jeffw> patch only to 8.12?
[02:37pm]<scottm> how far back is sendmail affected?
[02:37pm]<rrognlie> nope... 8.8, 8.9, 8.10, 8.11, 8.12
[02:37pm]<jeffw> this is gonna be ugly
[02:37pm]<rrognlie> yes
[02:37pm]<scottm> <expletive deleted>
[02:37pm]<rrognlie> "there are national security issues that need to be
addressed
                    before it's announced"
[02:38pm]<jeffw> you're kidding?
[02:38pm]<rrognlie> the patch protects not only the MTA, but any
downstream MTAs
                    (which is nice)
[02:38pm]<mike_> "whitehouse.gov needs to patch their servers"

[/snip]

Konstantin Angelov
Yellowbrix Inc.
(703) 519-1099 - work
(703) 548-9151 - fax

============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================