<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div dir="ltr">FYI, please update!<br><br><br>Begin forwarded message:<br><br></div><blockquote type="cite"><div dir="ltr"><b>From:</b> US-CERT <US-CERT@ncas.us-cert.gov><br><b>Date:</b> February 25, 2020 at 19:47:39 EST<br><b>To:</b> marraccini@acm.org<br><b>Subject:</b> <b>OpenSMTPD Releases Version 6.6.4p1 to Address a Critical Vulnerability</b><br><b>Reply-To:</b> US-CERT@ncas.us-cert.gov<br><br></div></blockquote><blockquote type="cite"><div dir="ltr">
<title> OpenSMTPD Releases Version 6.6.4p1 to Address a Critical Vulnerability
</title>
<table width="700" border="0" cellspacing="0" cellpadding="0" align="center">
<tbody><tr>
<td>
<a id="gd_top" name="gd_top"></a>
<p><img src="https://content.govdelivery.com/attachments/fancy_images/USDHSUSCERT/2019/02/2396011/cisa-logo_original.png" alt="Cybersecurity and Infrastructure Security Agency Logo" title="null" width="254" height="103" data-unique-identifier=""></p>
<p>National Cyber Awareness System:</p>
<p> </p>
<div class="rss_item" style="margin-bottom: 2em;">
<div class="rss_title" style="font-weight: bold; font-size: 120%; margin: 0 0 0.3em; padding: 0;"><a href="https://www.us-cert.gov/ncas/current-activity/2020/02/25/opensmtpd-releases-version-664p1-address-critical-vulnerability">OpenSMTPD Releases Version 6.6.4p1 to Address a Critical Vulnerability</a></div>
<div class="rss_pub_date" style="font-size: 90%; font-style: italic; color: #666666; margin: 0 0 0.3em; padding: 0;">02/25/2020 05:04 PM EST</div>
<br>
<div class="rss_description" style="margin: 0 0 0.3em; padding: 0;">Original release date: February 25, 2020<br>
<p>OpenSMTPD has released version 6.6.4p1 to address a critical vulnerability. A remote attacker could exploit this vulnerability to take control of an affected server. OpenSMTPD is an open-source server-side implementation of the Simple Mail Transfer Protocol (SMTP) that is part of the OpenBSD Project.</p>
<p>The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to apply the necessary update. For OpenBSD implementations, binary patches are available through syspatch; see <a href="https://www.mail-archive.com/misc@opensmtpd.org/msg04888.html">OpenSMTPD’s Message 04888</a> for further instruction. For other systems, the update is available at <a href="https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/6.6.4p1">OpenSMTPD’s GitHub release page</a>.</p>
<div class="field field--name-body field--type-text-with-summary field--label-hidden field--item">
<p class="privacy-and-terms">This product is provided subject to this <a href="https://www.us-cert.gov/privacy/notification">Notification</a> and this <a href="https://www.dhs.gov/privacy-policy">Privacy & Use</a> policy.</p>
</div>
</div>
</div>
<style>body {
font-size: 1em; font-family: Arial, Verdana, sans-serif; font-weight: normal; font-style: normal; color: #333333;
}
</style>
<div id="mail_footer">
<hr>
<table style="width: 100%;" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="color: #757575; font-size: 10px; font-family: Arial;" width="89%" height="60">A copy of this publication is available at <a href="https://www.us-cert.gov" title="US-CERT">www.us-cert.gov</a>. If you need help or have questions, please send an email to <a href="mailto:info@us-cert.gov" title="Mail to info@us-cert.gov">info@us-cert.gov</a>. Do not reply to this message since this email was sent from a notification-only address that is not monitored. To ensure you receive future US-CERT products, please add US-CERT@ncas.us-cert.gov to your address book.</td>
</tr>
</tbody>
</table>
<table style="width: 400px;" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="color: #666666; font-family: Arial, sans-serif; font-size: 12px;" valign="bottom" height="24">OTHER RESOURCES:</td>
</tr>
<tr>
<td style="color: #666666; font-family: Arial, sans-serif; font-size: 12px;" valign="middle" height="24">
<a href="http://www.us-cert.gov/contact-us/" target="_blank" rel="noopener">Contact Us</a> | <a href="http://www.us-cert.gov/security-publications" target="_blank" rel="noopener">Security Publications</a> | <a href="http://www.us-cert.gov/ncas" target="_blank" rel="noopener">Alerts and Tips</a> | <a href="http://www.us-cert.gov/related-resources" target="_blank" rel="noopener">Related Resources</a>
</td>
</tr>
</tbody>
</table>
<table style="width: 150px;" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="color: #666666; font-family: Arial, sans-serif; font-size: 12px;" colspan="7" valign="bottom" height="24">STAY CONNECTED:</td>
</tr>
<tr>
<td width="41"><a href="http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new"><img src="https://service.govdelivery.com/banners/GOVDELIVERY/SOCIAL_MEDIA/envelope.gif" border="0" alt="Sign up for email updates" width="25" height="25" data-unique-identifier=""></a></td>
</tr>
</tbody>
</table>
<p style="color: #666666; font-family: Arial, sans-serif; font-size: 12px;">SUBSCRIBER SERVICES:<br><a href="http://public.govdelivery.com/accounts/USDHSUSCERT/subscribers/new?preferences=true" target="_blank" rel="noopener">Manage Preferences</a> | <a href="https://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/one_click_unsubscribe?verification=5.56e6a4d0bb036798538e9c6b0d06e9c5&destination=marraccini%40acm.org" target="_blank" rel="noopener">Unsubscribe</a> | <a href="https://subscriberhelp.govdelivery.com/">Help</a></p>
</div>
<div id="tagline">
<hr>
<table style="width: 100%;" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="color: #757575; font-size: 10px; font-family: Arial;" width="89%">This email was sent to marraccini@acm.org using GovDelivery Communications Cloud on behalf of: United States Computer Emergency Readiness Team (US-CERT) · 245 Murray Lane SW Bldg 410 · Washington, DC 20598 · <span>(888) 282-0870</span>
</td>
<td align="right" width="11%"><a href="https://subscriberhelp.granicus.com/" target="_blank"><img src="https://content.govdelivery.com/images/govd-logo-dark.png" border="0" alt="GovDelivery logo" width="115" data-unique-identifier=""></a></td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
</tbody></table>
</div></blockquote></body></html>