Bug#851397: jessie-pu: package sendmail/8.14.4-8+deb8u2
Control: tags -1 + confirmed
On Sat, 2017-01-14 at 16:22 +0100, Andreas Beckmann wrote:
> sendmail (8.14.4-8+deb8u2) jessie-pu; urgency=medium
>
> * QA upload.
>
> Disclaimer: I last ran sendmail about 15 years ago on Solaris 8.
>
> * Only touch files as smmsp:smmsp in /var/run/sendmail/stampdir (writable by
> group smmsp) to avoid possible privilege escalation. (Closes: #841257)
> * Use lockfile-create (from lockfile-progs) instead of touch to manage the
> cronjob lockfiles.
>
> This fix has been in unstable for some time (and without regression
> reports for its second iteration), but I don't know anyone who could
> test this in jessie properly.
> Anyway, I'll ping all people involved in the relevant bug reports
> to see whether they can test it once it reached jessie-pu.
>
> * sendmail-base: Add Depends: netbase for /etc/services.
>
> Backported from sid, sendmail is noisy if /etc/services is missing
> (and maybe not working). No known bug report, probably since
> it is unlikely to install a production server without netbase.
Please go ahead.
Regards,
Adam
Reply to: