Re: pkg/59743 (mail/opensmtpd: CVE-2025-62875: OpenSMTPD: Trivial Local Denial-of-Service via UNIX Domain Socket)

To: gnats-bugs%netbsd.org@localhost
Subject: Re: pkg/59743 (mail/opensmtpd: CVE-2025-62875: OpenSMTPD: Trivial Local Denial-of-Service via UNIX Domain Socket)
From: Benny Siegert <bsiegert%netbsd.org@localhost>
Date: Sun, 9 Nov 2025 10:54:48 +0000 (UTC)

On Sat, 8 Nov 2025, Paolo Vincenzo Olivo via gnats wrote:

On pkgsrc-trunk, mail/opensmtpd was updated to 7.8.0 on November the 2nd,
[3] and the pkgsrc-vulnerabilities list was updated to reflect the fact
that opensmtpd-7.7.0p0, found in pkgsrc-2025Q3, is the only version
known to be affected by this bug.[4]


So we pull up the 7.8.0 update to fix this

--
Benny

References:
- Re: pkg/59743 (mail/opensmtpd: CVE-2025-62875: OpenSMTPD: Trivial Local Denial-of-Service via UNIX Domain Socket)
  - From: Paolo Vincenzo Olivo via gnats

Prev by Date: Re: pkg/59743 (mail/opensmtpd: CVE-2025-62875: OpenSMTPD: Trivial Local Denial-of-Service via UNIX Domain Socket)
Next by Date: Re: pkg/59743 (mail/opensmtpd: CVE-2025-62875: OpenSMTPD: Trivial Local Denial-of-Service via UNIX Domain Socket)
Previous by Thread: Re: pkg/59743 (mail/opensmtpd: CVE-2025-62875: OpenSMTPD: Trivial Local Denial-of-Service via UNIX Domain Socket)
Next by Thread: Re: pkg/59743 (mail/opensmtpd: CVE-2025-62875: OpenSMTPD: Trivial Local Denial-of-Service via UNIX Domain Socket)
Indexes:

Home | Main Index | Thread Index | Old Index