Subject: Re: Mailman vulnerability
To: Steven M. Bellovin <email@example.com>
From: D'Arcy J.M. Cain <darcy@NetBSD.org>
Date: 12/10/2005 09:29:06
On Sat, 10 Dec 2005 09:07:09 -0500
"Steven M. Bellovin" <firstname.lastname@example.org> wrote:
> In message <20051210075250.5e86cec9.darcy@NetBSD.org>, "D'Arcy J.M. Cain" write
> >However, Manuel Bouyer supposedly fixed this:
> >revision 1.27
> >date: 2005/12/08 21:09:04; author: bouyer; state: Exp; lines: +2 -1
> >Apply patch (from debian via Kimmo Suominen) to address
> >http://secunia.com/advisories/17511/ (denial of service).
> >Is there something else that needs to be fixed?
> I was poking around the Mailman site a few days ago, and did not see
> any official fix for it there. We'd have to import the Debian fix
> mentioned in the advisory.
That's my point. It looks like we already did but it still complains.
D'Arcy J.M. Cain <darcy@NetBSD.org>