On Mon, 2 Jul 2001, Douglas J. Hunley wrote: dh> -----BEGIN PGP SIGNED MESSAGE----- dh> Hash: SHA1 dh> dh> On Friday 29 June 2001 20:16, S.Toms babbled: dh> > In case anyone wants to know, procmail 3.20 is out and the authors are dh> > recommending that previous versions be upgraded for potentionally dh> > exploitable security issues. This problem exists if procmail is setuid or dh> > setgid on your system. dh> > The issues at hand are that procmail could be forced to crash in a way dh> > that could be exploited to provide access to a system. Whether this has dh> > actually been done is another story. dh> dh> actually, 3.21 is out and has fixes for 3.20.. so keep upgrading Yeah, the day after I sent that in, Philip posted 3.21 which fixes portability problems with INCLUDERC. You won't beable to get 3.20 unless you visit the archive section now. :) dh> dh> -- S.Toms - smotrs@mindspring.com - www.mindspring.com/~smotrs SuSE Linux v7.0+ - Kernel 2.2.18 "Whom are you?" said he, for he had been to night school. -- George Ade