Subject: Re: New CERT advisory for sendmail pre 8.13.6
To: Ed Ravin <eravin@panix.com>
From: Adrian Portelli <adrianp@NetBSD.org>
List: tech-security
Date: 03/22/2006 20:47:19
Ed Ravin wrote:
> I presume that by now most of the folks on this list have heard of
> the CERT advisory on Sendmail.  According to the vulnerability notes:
> 
>    http://www.kb.cert.org/vuls/id/834865
> 
> NetBSD is listed as "unknown".  Can anyone provide better information?
> Did the NetBSD project or security officer get an early notice?
> 

If you use sendmail from pkgsrc 8.13.5nb2 includes the patch for this
issue from sendmail.org.

adrian.