Re: pkg/59743 (mail/opensmtpd: CVE-2025-62875: OpenSMTPD: Trivial Local Denial-of-Service via UNIX Domain Socket)

["Benny Siegert via gnats" <gnats-admin%NetBSD.org@localhost>]

The following reply was made to PR pkg/59743; it has been noted by GNATS.

From: Benny Siegert <bsiegert%netbsd.org@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: vins%netbsd.org@localhost, gnats-admin%netbsd.org@localhost, pkgsrc-bugs%netbsd.org@localhost, 
    rbranco%suse.de@localhost
Subject: Re: pkg/59743 (mail/opensmtpd: CVE-2025-62875: OpenSMTPD: Trivial
 Local Denial-of-Service via UNIX Domain Socket)
Date: Sun, 9 Nov 2025 10:54:48 +0000 (UTC)

 On Sat, 8 Nov 2025, Paolo Vincenzo Olivo via gnats wrote:
 
 > On pkgsrc-trunk, mail/opensmtpd was updated to 7.8.0 on November the 2nd,
 > [3] and the pkgsrc-vulnerabilities list was updated to reflect the fact
 > that opensmtpd-7.7.0p0, found in pkgsrc-2025Q3, is the only version
 > known to be affected by this bug.[4]
 
 So we pull up the 7.8.0 update to fix this
 
 -- 
 Benny