[VulnDiscuss] sendmail vunerability?

there is some rumor spreading about new sendmail vulnerability. i do not see
any news at www.sendmail.org but supposedly ths is remote buffer overflow.
i received the patch (see below), but o not have any exploit, so please
don't mail me about it.

does this look legitimate? any comments? is this something old? is
this some scam backdoor?

--- parseaddr.c 18 Jan 2003 00:41:48 -0000      8.359.2.4
+++ parseaddr.c 20 Mar 2003 12:20:43 -0000

@@ -709,7 +710,7 @@
                        }

                        /* read a new input character */
-                       c = *p++;
+                       c = (unsigned char)(*p++);
                        if (c == '\0')
                        {
                                /* diagnose and patch up bad syntax */

-----------
--- nag ---
-----------