From owner-freebsd-stable@FreeBSD.ORG Thu Jun 18 13:24:39 2015 Return-Path: Delivered-To: freebsd-stable@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 762ECFE for ; Thu, 18 Jun 2015 13:24:39 +0000 (UTC) (envelope-from matthew@freebsd.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 034A4C7D for ; Thu, 18 Jun 2015 13:24:38 +0000 (UTC) (envelope-from matthew@freebsd.org) Received: from ox-dell39.ox.adestra.com (no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged)) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.1/8.15.1) with ESMTPSA id t5IDONMC070405 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Thu, 18 Jun 2015 14:24:29 +0100 (BST) (envelope-from matthew@freebsd.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=freebsd.org DKIM-Filter: OpenDKIM Filter v2.9.2 smtp.infracaninophile.co.uk t5IDONMC070405 Authentication-Results: smtp.infracaninophile.co.uk/t5IDONMC070405; dkim=none reason="no signature"; dkim-adsp=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged) claimed to be ox-dell39.ox.adestra.com Message-ID: <5582C67F.5050508@freebsd.org> Date: Thu, 18 Jun 2015 14:24:15 +0100 From: Matthew Seaman User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: freebsd-stable@freebsd.org Subject: Re: [FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-15:08.sendmail References: <201506180553.t5I5rKlO059969@freefall.freebsd.org> <20150618112132.GD7234@pol-server.leissner.se> In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="v4E7JAdqFuEW8iI14xeSSmp4GGNJnFaRK" X-Virus-Scanned: clamav-milter 0.98.7 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Jun 2015 13:24:39 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --v4E7JAdqFuEW8iI14xeSSmp4GGNJnFaRK Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 06/18/15 13:54, Royce Williams wrote: > Did you (re)generate your dh.params file as noted in the Workaround sec= tion? There isn't a default dh.param file. The suggested work-around in the EN is to generate one. > On my systems, I had to do this to support the actual patch (not to per= form > the workaround). Which is precisely the point. The EN suggests either to patch sendmail or add a dh.param file. Either of those should work alone, but according to reports on various mailing lists it seems only the dh.param method works reliably (and I can personally confirm it works without needing the sendmail patches from the EN.) It's not clear to me if there are some special circumstances that happen to prevent the fix in the EN working for just a few people, or if it is a more general problem. > You might have to restart sendmail as well, but I have not tested this.= Yes you do, with either alternative. Cheers, Matthew --v4E7JAdqFuEW8iI14xeSSmp4GGNJnFaRK Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJVgsaHAAoJEABRPxDgqeTnF7UP/jIBBoUhROKjMMX7LFxbAc4t QQ7vbNzr3CY2RBY3QAJkzNu4sCJWFE1pkGKbHoI58cXDJdJV8LmsBe30tOp1Zy81 oaIviE9IitMUUb1PBYoQM2Z9hUeGVtvt4JdqCRGSUyHhmscVpTZIGNrJaAOUE6oQ z4lWO9Pq0YWzMDWwfu4R585uSPH6bZuqTom5KXiKlGZt1u5zm6qa7es+RajtahE7 A8PCmK7W5vh8KH4edrnJ7IchdWwgjnFueKbGZ3+bavKnX0T2sGgQDx3q1VMA3oHg xWGm0YJyxla5tv4xY3+MPE+kvtlJbzXEHHvaEONYX4Rs6jmWQ5TgD1+G+Ism2s71 0OniA8vzpCUNKysRPrmDEPyc0P4xQX/huH7kQCisGE0jlDToB1OBrADO7NNpchzF mffGEsWGD3RZ8vOtaWuA/wWmVrVcflt+JfG3086kL/HKuSYBgJVmHOh5vRYkinv3 FwjXHisgt79uNIpe+pnQjb73vZeylUMZV1F1ii84Ri8U64VdiAV3hqycEaUSWpod W7svODR3V7+0mD+SogINKSyhZ6c5aVjaz09VfIarNpgfYNdMtbZ8Hu8pqGPzu6gc izyjK08HnhA4M0/wYoQe1mBc7+N5pAFjsAFoTB8eCzenQ5SEYMIsHwdnRWu23mv+ ipgkqMUE6WDV77wYf841 =/gp0 -----END PGP SIGNATURE----- --v4E7JAdqFuEW8iI14xeSSmp4GGNJnFaRK--