Claus Assmann | 17 Sep 18:22 2003

sendmail 8.12.10 available

Sendmail, Inc., and the Sendmail Consortium announce the availability
of sendmail 8.12.10.  It contains a fix for a security problem
discovered by Michal Zalewski whom we thank for bringing this problem
to our attention.  We also want to thank Todd C. Miller for providing
a patch.  sendmail 8.12.10 also includes fixes for other potential
problems, see the release notes below for more details.  Sendmail
urges all users to either upgrade to sendmail 8.12.10 or apply a
patch which is part of this announcement.  Remember to check the
PGP signatures of patches or releases obtained via FTP or HTTP (to
check the correctness of the patch in this announcement please
verify the PGP signature of it).  For those not running the open
source version, check with your vendor for a patch.

For a complete list of changes see the release notes down below.

Please send bug reports to sendmail-bugs <at> as usual.
Please send security reports to sendmail-security <at> using
PGP encryption.

Note: We have changed the way we digitally sign the source code
distributions to simplify verification: in contrast to earlier
versions two .sig files are provided, one each for the gzip'ed
version and the compressed version. That is, instead of signing the
tar file, we sign the compressed/gzip'ed files, so you do not need
to uncompress the file before checking the signature.

This version can be found at
(Continue reading)