Bugtraq: Re: Sendmail 8.6.9

[perry () imsi com (Perry E. Metzger)]

Nathan Lawson says:
> I have heard some random comments about there being a hole in 8.6.9.  What
> work is being done to find this and patch it?  The only recommendation I have
> received is that people use IDA Sendmail.  Anyone have any more information?
There are massive holes in IDA that are fixed by 8.6.9; anyone telling
you the reverse is tugging very hard on your lower appendages. Of
course, new security bugs in sendmail are inevitable, but I expect
Eric A. will fix them rapidly as they appear now that he's back in the
maintainance business.

.pm