Subject: Re: Mailman vulnerability
To: Steven M. Bellovin <smb@cs.columbia.edu>
From: Lubomir Sedlacik <salo@Xtrmntr.org>
List: current-users
Date: 12/10/2005 16:36:39
--JI+G0+mN8WmwPnOn
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Dec 10, 2005 at 10:29:33AM -0500, Steven M. Bellovin wrote:
> In message <20051210151347.GG12942@Xtrmntr.org>, Lubomir Sedlacik
> writes:
> > how old is your pkg-vulnerabilities file?  the version number was
> > corrected after the fix was commited in revision 1.1245.
>=20
> I still see the problem with 1.1252.
>=20
> > and why is this discussed on current-users?  please contact the
> > pkgsrc security team at pkgsrc-security@ when in doubt about
> > pkg-vulnerabilities and related issues.  thanks,
>=20
> Added to my cc list; current-users kept because that's where the issue
> was raised.
>=20
> mailman<2.6.1nb1        1542,denial-of-service          http://secunia.co=
m/advisories/17511/
          ^^^^^
> [...]
> =3D=3D=3D> Checking for vulnerabilities in mailman-2.1.6nb1
                                               ^^^^^

ok, i see it now.  manuel mistyped 2.1.6 as 2.6.1.  fixed now, make sure
you have revision 1.1253.

regards,

--=20
-- Lubomir Sedlacik <salo@{NetBSD,Xtrmntr,silcnet}.org>   --

--JI+G0+mN8WmwPnOn
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (NetBSD)

iD8DBQFDmvYHiwjDDlS8cmMRAseJAKCWFZhIuunaWV+YjlsztxBtLlzGgwCfUS9b
3JnBeOPcXOqHwwFHp0o1KVg=
=DmIq
-----END PGP SIGNATURE-----

--JI+G0+mN8WmwPnOn--