[CentOS] Fwd: Obsolete NSA exploit for Postfix 2.0 - 2.2

Mon Apr 10 01:10:41 UTC 2017
Robert Moskowitz <rgm at htt-consult.com>

Too busy getting ready for Passover, and not looking carefully enough at 
the numbers.

I better get back to what I should be doing right now.

See you all Thursday.

On 04/09/2017 08:13 PM, Peter wrote:
> On 10/04/17 12:08, Robert Moskowitz wrote:
>> This was just posted on the Postfix list.  Centos 7 ships with:
>> postfix-2.10.1-6.el7
>>
>> Has this cert advisory been applied to the Centos build of Postfix?
>>
>> This is an exploit for Postfix 2.0 - 2.2, for a bug that was fixed
>> 11 years ago in Postfix 2.2.11 and later.
> 2.10.1 is way later than 2.2.11, this bug was never in any version of
> postfix that shipped after CentOS 4.
>
>
> Peter
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
>