New comment by jrigg on void-packages repository https://github.com/void-linux/void-packages/issues/26320#issuecomment-727054541 Comment: The last CVE I could find against sendmail was for 8.14.1 in 2014. Current version is 8.16.1. I think security has received more attention in recent versions. It can still do more than most other MTAs and configuration is "educational".