From owner-freebsd-hackers  Tue Oct 17 18:14:25 1995
Return-Path: owner-hackers
Received: (from root@localhost)
          by freefall.freebsd.org (8.6.12/8.6.6) id SAA17443
          for hackers-outgoing; Tue, 17 Oct 1995 18:14:25 -0700
Received: (from dima@localhost)
          by freefall.freebsd.org (8.6.12/8.6.6) id SAA17431
          ; Tue, 17 Oct 1995 18:14:23 -0700
Message-Id: <199510180114.SAA17431@freefall.freebsd.org>
Subject: Re: TCP/IP Spoofing etc.
To: karl@bagpuss.demon.co.uk (Karl Strickland)
Date: Tue, 17 Oct 1995 18:14:22 -0700 (PDT)
Cc: dima@freebsd.org, roberto@keltia.freenix.fr, pete@puffin.pelican.com,
        julian@ref.tfs.com, hackers@freebsd.org
In-Reply-To: <199510121211.NAA21217@bagpuss.demon.co.uk> from "Karl Strickland" at Oct 12, 95 01:11:04 pm
From: dima@freebsd.org (Dima Ruban)
X-Class: Fast
Organization: HackerDome
X-Mailer: ELM [version 2.4 PL24]
Content-Type: text
Content-Length: 1192      
Sender: owner-hackers@freebsd.org
Precedence: bulk

Karl Strickland writes:
> 
> > 
> > Ollivier Robert writes:
> > > 
> > > It seems that Pete Carah said:
> > > > The latest cert report was a summary of the 'announced' bugs which are
> > > > still outstanding on popular systems...  I don't know which ones we are
> > > > susceptible to; we are using the latest (or next-latest) sendmail which
> > > > has plugged many of them.
> > > 
> > > Speaking of sendmail, can we import 8.7.1 in -CURRENT ?
> > 
> > 8.7.1 has a bit different sendmail.cf ....
> 
> I would suggest waiting a while before importing sendmail 8.7.x.  Apparently
> an awful lot of code has changed or been-added since 8.6.12, and as far as I
> know, nobody has performed a security audit on the 8.7.1 code yet.

That's truth ...

> Unless there are compelling reasons to go to 8.7.1 now, I would say 'better
> with the devil you know', at least for the time being.
> 
> -- 
> ------------------------------------------+-----------------------------------
> Mailed using ELM on FreeBSD               |                    Karl Strickland
> PGP 2.3a Public Key Available.            | Internet: karl@bagpuss.demon.co.uk
>                                           |
> 

-- dima