Slashdot Mirror

← Back to Stories (view on slashdot.org)

FreeBSD Users: Time To Patch Sendmail Again

Posted by timothy on from the and-not-just-only-them dept.

Barrett Lyon writes "The FreeBSD Project just submitted this security advisory out to the masses: "FreeBSD-SA-03:07.sendmail, a second sendmail header parsing buffer overflow." It seems that the overflow is not limited to FreeBSD and that there is currently no workaround "other than not using sendmail." Yet another good reason to run Qmail!"

4 of 39 comments (clear)

  1. This is the SAME HOLE as yesterday's story by dhunley · · Score: 2, Funny

    Doesn't anyone on the /. team read before posting? This is the same hole that made the front page yesterday concerning the char to int conversion. Just cause one of the BSDs finally acknowleged the issue, it deserves *another* front page story? Jeez... upgrade to sendmail 8.12.9 and get on w/ your life...

  2. Same hole as yesterday, fixed in Sendmail 8.12.9 by Phaid · · Score: 3, Informative

    Just in case anyone's wondering, this is the same hole reported on Slashdot yesterday and reported in this CERT advisory.

    I mention this because the FreeBSD posting doesn't explicitly mention which version of Sendmail this affects, but it does link to the CERT article.

  3. Re:Why? by RLiegh · · Score: 3, Funny

    And yet FreeBSD can run Linux apps under Linux emulation faster than Linux can. I find that pretty funny.

    I'll be amused when OpenBSD can run Linux apps in FreeBSD compatibility mode faster than FreeBSD can.
  4. Exim by phaze3000 · · Score: 2, Insightful

    For those out there looking to replace sendmail, I suggest Exim.
    It's extremely stable (we've been running it on our mail cluster for 326 days now with 0 seconds of downtime) and unlike sendmail it doesn't have a config file that looks like line noise.

    --
    Blaming GW Bush for the Iraq war is like blaming Ronald McDonald for the poor quality of food.