The advisory states that the problem was fixed on 8/25 approx. 22:35. The security also states that the problem afflicts sendmail 8.12.0 through 8.12.8. However, I have a system which had its world built on April 9, 2003, and it is running sendmail 8.12.9, according to the 220 banner it gives when I telnet into port 25. So I'm conffused as to why sendmail would need to be patched on 8/25 when 8.12.9 has been in the base distribution since April. Thanks for shedding some light, Jim
On Tue, Aug 26, 2003 at 10:03:25AM -0700, James Long wrote:> > So I'm conffused as to why sendmail would need to be patched > on 8/25 when 8.12.9 has been in the base distribution since > April.D'oh! "4-STABLE prior to Mar 29 19:33:18 2003 UTC"> Thanks for shedding some light,Don't mention it.