From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.2) Gecko/20010725
Description of problem:
sendmail-8.10.0-aliasesDoS.patch should NOT be included
attaching emails from claus
Steps to Reproduce:
1. rpm --rebuild sendmail-8...
This was originally from a sendmail 8.12.0 Beta build, but applies to current rpm
From Claus (@sendmail Inc.)
> [chrismcc@www1 sendmail-8.12.0.Beta7]$ head -n 1030 sendmail/main.c |
> tail -n 7
> if (LogLevel > 1)
> sm_syslog(LOG_ALERT, NOQID,
> "user %d attempted to rebuild the alias map",
> usrerr("Permission denied");
> finis(FALSE, EX_USAGE);
Where did you get that version? Did you patch it? That's NOT in
the version we distribute (I just verified it twice). Please
download Beta7 from sendmail.org and verify the PGP signature.
On Thu, May 24, 2001, Christopher McCrory wrote:
> > Where did you get that version? Did you patch it? That's NOT in
> > the version we distribute (I just verified it twice). Please
> > download Beta7 from sendmail.org and verify the PGP signature.
> You're right. Sorry. It was from a aliases DOS attack patch for older
> sendmail versions that I accidently left in place.
That code is in sendmail since 8.10.
------ END -----
I can send/attach more emails if you would like.
Thanks a lot for this bug-report, fixed in next release,
Florian La Roche