3 ms·

What did Debian change to introduce this vulnerability?

• dsr_ 6y ago
  Nothing, per se. But they don't set up softlimits or message size limits by default, both of which you should definitely do... it's just that the values you put in are specific to your situation.
  • tom_mellior 6y ago
    If you have DJB's ego yelling at you that the default configuration is safe, why would you bother setting limits to fix it?
    • jacquesm 6y ago
      Because you care more about the users than about DJB's ego.
      • haroldp 6y ago
        Then you should be running Postfix.
    • dependenttypes 6y ago
      DJB has been telling people to run it with the memory limits since 2005.