Vijay Rajah:
> Hello,
>
> I'm sure most of you are aware of the latest Glibc vulnerability. (FYI:
> http://www.openwall.com/lists/oss-security/2015/01/27/9)
>
> I'm not sure If postfix is vulnerable. I see from that posting that,
> exim under certain configurations, is vulnerable.
>
> I think since postfix supports IPV6, it would use the getaddrinfo()
> function. Is there any place where the older getbyhostname() function is
> still used?
>
> Is postfix in any way at all, vulnerable to this bug?
Postfix does not call gethostbyname since 2005, unless it is COMPILED
with -DNO_IPv6 but that should happen only on systems that are more
than 15 years old.
Wietse
