From owner-freebsd-stable  Sat Oct 12 18: 7:33 2002
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0DF5437B401
	for <freebsd-stable@FreeBSD.ORG>; Sat, 12 Oct 2002 18:07:32 -0700 (PDT)
Received: from horsey.gshapiro.net (horsey.gshapiro.net [209.220.147.178])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6C94543E65
	for <freebsd-stable@FreeBSD.ORG>; Sat, 12 Oct 2002 18:07:31 -0700 (PDT)
	(envelope-from gshapiro@gshapiro.net)
Received: from horsey.gshapiro.net (gshapiro@localhost [IPv6:::1])
	by horsey.gshapiro.net (8.12.6/8.12.6) with ESMTP id g9D17UPj035149
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO);
	Sat, 12 Oct 2002 18:07:31 -0700 (PDT)
Received: (from gshapiro@localhost)
	by horsey.gshapiro.net (8.12.6/8.12.6/Submit) id g9D17Utp035146;
	Sat, 12 Oct 2002 18:07:30 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <15784.51026.102596.88414@horsey.gshapiro.net>
Date: Sat, 12 Oct 2002 18:07:30 -0700
From: Gregory Neil Shapiro <gshapiro@FreeBSD.ORG>
To: "Vitor de Matos Carvalho" <vitor@softinfo.com.br>
Cc: "FreeBSD-Stable" <freebsd-stable@FreeBSD.ORG>,
	<sendmail-bugs@sendmail.org>
Subject: Re: Sendmail smrsh bypass vulnerabilities
In-Reply-To: <00b101c269a6$da529cd0$020aa8c0@acaraje>
References: <00b101c269a6$da529cd0$020aa8c0@acaraje>
X-Mailer: VM 7.07 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

vitor> Patch that it is available to correct bug in the sendmail that was
vitor> divulged today in bugtraq related to smrsh bypass vulnerabilities,
vitor> will be launched one patch to apply in the sendmail that is
vitor> available in cvs of FreeBSD - STABLE, or will have that to apply
vitor> patch that it is in the page of the Sendmail?

vitor> http://www.sendmail.org/patches/smrsh-20020924.patch
 
The patch was applied to -STABLE before 4.7-RELEASE was cut.  I just MFS'ed
it into -CURRENT.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message