From owner-freebsd-current Thu Nov 5 14:10:09 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id OAA09261 for freebsd-current-outgoing; Thu, 5 Nov 1998 14:10:09 -0800 (PST) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from germanium.xtalwind.net (germanium.xtalwind.net [205.160.242.5]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA09174 for ; Thu, 5 Nov 1998 14:10:00 -0800 (PST) (envelope-from jack@germanium.xtalwind.net) Received: from localhost (jack@localhost) by germanium.xtalwind.net (8.9.1/8.9.1) with ESMTP id RAA06209; Thu, 5 Nov 1998 17:08:28 -0500 (EST) Date: Thu, 5 Nov 1998 17:08:28 -0500 (EST) From: jack To: Leif Neland cc: freebsd-current@FreeBSD.ORG Subject: Re: sendmail.8.9.1a patch In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, 5 Nov 1998, Leif Neland wrote: > Could somebody please apply the sendmail-8.9.1a patch to > /usr/src/contrib/sendmail? Let's hope not, at least not as the default. From sendmail.8.9.1a.patch.README Introduction [snip] It is important to note that sendmail itself is not vulnerable to these attacks. [snip] Tradeoffs As this patch requires scanning the body of the message for MIME indicators, there will be a performance penalty to run this code. -------------------------------------------------------------------------- Jack O'Neill Systems Administrator / Systems Analyst jack@germanium.xtalwind.net Crystal Wind Communications, Inc. Finger jack@germanium.xtalwind.net for my PGP key. PGP Key fingerprint = F6 C4 E6 D4 2F 15 A7 67 FD 09 E9 3C 5F CC EB CD enriched, vcard, HTML messages > /dev/null -------------------------------------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message