Sendmail news for non RFC conformant change

--nextPart3564424.U13uJh01X3
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="UTF-8"; protected-headers="v1"
From: Bastien =?ISO-8859-1?Q?Roucari=E8s?= <[email protected]>
To: [email protected]
Cc: Andreas Beckmann <[email protected]>
Subject: Sendmail news for non RFC conformant change
Date: Sun, 12 May 2024 19:40:46 +0000
Message-ID: <2228819.PG5y0xxraL@portable-bastien>
MIME-Version: 1.0

Hi,

Could you review the following item (please cc i am not subscribed) 

  Sendmail was affected by SMTP smurgling (CVE-2023-51765).
  Remote attackers can use a published exploitation technique
  to inject e-mail messages with a spoofed MAIL FROM address,
  allowing bypass of an SPF protection mechanism.
  This occurs because sendmail supports some combinaison of
  <CR><LF><NUL>.
  .
  This particular injection vulnerability has been closed,
  unfortunatly full closure need to reject mail that
  contain NUL.
  .
  This is slighly non conformant with RFC and could
  be opt-out by setting confREJECT_NUL to 'false' 

--nextPart3564424.U13uJh01X3
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part.
Content-Transfer-Encoding: 7Bit

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmZBGz4ACgkQADoaLapB
CF8AbA//dA/CKLikHrK0H+tYjJKMcYqoR1qi4wOiovZ/uHLAd1kPiLYmqowe/bhp
tFEC39EN/Ceaosb7onTaPuOVet0cj5zTX3KMymTev+sUj9AbajJP9Siq+xzAVCZ2
cRsEvxeQKVwzjdWFcXfBhtb7gxMKpd0Ff2Cc57SeHOByL/7YWG0EmQHc+uYFe/bm
DOtL0QWU6n2wu6uPD2tjjXhXYCeVpr7uEGkNsgXIzNMhEVtHh22F+f99xJAUiSxm
mnJDC93yJHg1Ph7XgFU6xTnQfIdTk+h+wf5zSK9MozuIVBE9xWLvXj+PuqH4MUaZ
k4N/vR5L1ETfV7DHcoP1+BDIH4bYnYKdiHrM2x2CsYer/rH47cmcu2HNgy0tK6aJ
DkLm5yhD5yOR/HduXr1NgD03bP4kIN70FLLTbUQeVyRu1OfxySWSC3nZCxCmtpTW
ye6khWJV2nanqoCt5f83OkMYjM+D2g/8/5PgS8O3tYAWlGKSRGroFgy6gXihZlBs
5dUPQwEEb/ybDhKbvpnGupl43grPRlWygZ8sNvr3sLc0UXcW9BBayubBRlCao1j7
1rUWXrYMJPyKVFM9/wxfhDQqCufeymzDcBD6JH60XfF9hxQP3EOMUVbrwhmfW/vt
0JuV0DUZjGmrNJ5/98wPEGYsd0BCJglf1cEhjAsZychkadCMyuU=
=hP7p
-----END PGP SIGNATURE-----

--nextPart3564424.U13uJh01X3--