Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <croalohbjdjf2cb6e5ol2l7rsdoxd6mr4mw55lyzzf7ljkkx5a@czm7be4dpjj4>
Date: Sat, 23 Dec 2023 14:29:34 +0200
From: Valtteri Vuorikoski <vuori@...com.org>
To: oss-security@...ts.openwall.com
Subject: Re: Re: New SMTP smuggling attack

On Fri, Dec 22, 2023 at 11:46:48AM +0100, Marcus Meissner wrote:
> Hi,
> 
> FWIW as no CVEs were to be found yet, I filed a CVE request for Postfix now.
> 
> Not sure if we need it for others like sendmail too, as that is also
> referenced by the security researchers.

Looks like exim opened a bug on this yesterday too, no sign of CVE yet:
<https://bugs.exim.org/show_bug.cgi?id=3063>

 -Valtteri

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.