[994] in bugtraq
Re: Sendmail 8.6.9
daemon@ATHENA.MIT.EDU (Perry E. Metzger)
Tue Feb 14 18:03:05 1995
To: nlawson@statler.csc.calpoly.edu (Nathan Lawson)
Cc: bugtraq@fc.net
In-Reply-To: Your message of "Tue, 14 Feb 1995 10:55:49 PST."
<9502141855.AA14282@statler.CSC.CalPoly.Edu>
Reply-To: perry@imsi.com
Date: Tue, 14 Feb 1995 16:03:43 -0500
From: "Perry E. Metzger" <perry@imsi.com>
Nathan Lawson says:
> I have heard some random comments about there being a hole in 8.6.9. What
> work is being done to find this and patch it? The only recommendation I have
> received is that people use IDA Sendmail. Anyone have any more information?
There are massive holes in IDA that are fixed by 8.6.9; anyone telling
you the reverse is tugging very hard on your lower appendages. Of
course, new security bugs in sendmail are inevitable, but I expect
Eric A. will fix them rapidly as they appear now that he's back in the
maintainance business.
.pm
