Re: lug-bg: Sendmail vulnerability

[gf@xxxxxxxxxxx (Georgi Chorbadzhiyski)]

Konstantin Angelov wrote:
> 
> Just an FYI. Proverqvaite za patch po chesto ot tuk natatuka - ne se znae
> tochno koga shte izleze oficialno tazi informacia na bql svqt
> 
> 
> [snip]
> 
> [02:35pm]<rrognlie> hey
> [02:35pm]<rrognlie> yes, I know
> [02:35pm]<rrognlie> and I've been sworn to not reveal anything until
> either 1) it
>                     leaks through back channels
> [02:36pm]<rrognlie> or 2) it gets released publicly...
> [02:36pm]<rrognlie> it's nasty.
> [02:36pm]<rrognlie> s/nasty/potentially/
> [02:36pm]<jeffw> any idea when we'll see a patch?
> [02:36pm]<rrognlie> the patch is done
> [02:36pm]<rrognlie> but we can't release it until it's announced
> [02:37pm]<jeffw> patch only to 8.12?
> [02:37pm]<scottm> how far back is sendmail affected?
> [02:37pm]<rrognlie> nope... 8.8, 8.9, 8.10, 8.11, 8.12
> [02:37pm]<jeffw> this is gonna be ugly
> [02:37pm]<rrognlie> yes
> [02:37pm]<scottm> <expletive deleted>
> [02:37pm]<rrognlie> "there are national security issues that need to be
> addressed
>                     before it's announced"
> [02:38pm]<jeffw> you're kidding?
> [02:38pm]<rrognlie> the patch protects not only the MTA, but any
> downstream MTAs
>                     (which is nice)
> [02:38pm]<mike_> "whitehouse.gov needs to patch their servers"
> 
> [/snip]

Ili za po-lesno ne izpolzvaite tozi piece of crap, narechen za blagozvuchie
"sendmail".


-- 
Georgi Chorbadzhiyski
http://georgi.unixsol.org/

============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================