[Esa-l] quarantined email stuck in que?

[Bill Larson]

As for your problem I have no idea.

However, you probally want to update your procmail
http://lwn.net/2001/0726/security.php3#procmail

In addition Sendmail reports that you probally need to update it also

Sendmail, Inc., and the Sendmail Consortium announce the availability of
sendmail 8.11.6 and 8.12.0.Beta19.

This new version fixes a security problem reported by SecurityFocus
regarding command line processing. This vulnerability is present in sendmail
open source versions between 8.10.0 and 8.11.5 as well as all 8.12.0.Beta
versions. Therefore, sendmail 8.12.0.Beta users should upgrade to
8.12.0.Beta19.

The problem was not present in 8.10 or earlier versions. However, as always,
we recommend using the latest version. Note that this problem is not
remotely exploitable.

8.11.6 is planned to be the final 8.11 release before 8.12.0 is released.

Bill Larson
Network Administrator
Compu-Net Enterprises
931-920-0043 or 877-920-1429 (toll free)

----- Original Message -----
From: "Glenn Valenta" <glenn at coloradostudios.com>
To: <esa-l at spconnect.com>
Sent: Monday, August 20, 2001 11:43 PM
Subject: [Esa-l] quarantined email stuck in que?


> Has anybody had the problem with html-trap.procmail ruleset v1.129
catching the
> poisoned e-mail but leaving it in the mail Que and sending out warnings
once
> every hour?  I'm having to deleting it manually from the Que. each time.
>
> I was running v 1.111 for a while with no problem and just recently
upgraded.
>
> Currently running...
> procmail-3.14-2
> sendmail-8.11.0
> RH6.2
>
> --
> Glenn Valenta   Engineering @ http://www.coloradostudios.com
> valenta at home.com              Personal mail
> glenn at coloradostudios.com     Work mail
> http://ouray.cudenver.edu/~gavalent/
> _______________________________________________
> E-mail Security Announce list mailing list
> E-mail Security Announce list at spconnect.com
> http://www.spconnect.com/mailman/listinfo/esa-l