OK. The fix is at http://busybox.net/~dvv/patch/sendmail.patch

* added limit to the number of headers -- this prevents a possible attack;
* removed the requirement for input to have at least one empty line
(delimiting headers and body) -- any line which contains no ':' is
treated as such a delimiter. This makes sendmail even dumber (in sense
of analyzing headers) but more robust and useful (a plain message can
be fed, some of us really don't care of headers:)

Sujith, please, try it.

Denys, please, consider applying.

Best regards,
--
Vladimir
_______________________________________________
busybox mailing list
[email protected]
http://lists.busybox.net/mailman/listinfo/busybox

Reply via email to