full-disclosure - Re: [USN-74-1] Postfix vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20050206201915.GA31273@box79162.elkhouse.de>
From: martin.pitt at canonical.com (Martin Pitt)
Subject: Re: [USN-74-1] Postfix vulnerability

Hi!

Wietse Venema [2005-02-05 17:09 -0500]:
> FYI,
> 
> This is a bug in a third-party IPv6 patch that is not part of Postfix.
> 
> Neither the official Postfix release, nor the work-in-progress
> version are not affected by this.

I am aware of this, but thanks for the notification.

The Ubuntu advisories (and in fact the advisories of all
Distributions) mostly talk about packages, which do not exactly
correspond to the "official" original releases (which we
call"upstream" releases). The Ubuntu package contains the IPv6 patch,
and since it is called "postfix", I just name it like this.

Sorry for any confusion this might cause.

Have a nice day,

Martin

-- 
Martin Pitt                       http://www.piware.de
Ubuntu Developer            http://www.ubuntulinux.org
Debian GNU/Linux Developer       http://www.debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050206/cf605562/attachment.bin