LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Security Week: July 28th, 2014
Linux Advisory Watch: July 25th, 2014
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Slackware: 2014-156-04: sendmail: Security Update Print E-mail
User Rating:      How can I rate this item?
Posted by Benjamin D. Thomas   
Slackware New sendmail packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. [More Info...]
[slackware-security]  sendmail (SSA:2014-156-04)

New sendmail packages are available for Slackware 13.0, 13.1, 13.37, 14.0,
14.1, and -current to fix a security issue.


Here are the details from the Slackware 14.1 ChangeLog:
+--------------------------+
patches/packages/sendmail-8.14.9-i486-1_slack14.1.txz:  Upgraded.
  This release fixes one security related bug by properly closing file
  descriptors (except stdin, stdout, and stderr) before executing programs.
  This bug could enable local users to interfere with an open SMTP
  connection if they can execute their own program for mail delivery
  (e.g., via procmail or the prog mailer).
  For more information, see:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3956
  (* Security fix *)
patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.1.txz:  Upgraded.
+--------------------------+


Where to find the new packages:
+-----------------------------+

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project!  :-)

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated packages for Slackware 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/sendmail-8.14.9-i486-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.0.txz

Updated packages for Slackware x86_64 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/sendmail-8.14.9-x86_64-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.0.txz

Updated packages for Slackware 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/sendmail-8.14.9-i486-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.1.txz

Updated packages for Slackware x86_64 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/sendmail-8.14.9-x86_64-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.1.txz

Updated packages for Slackware 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/sendmail-8.14.9-i486-1_slack13.37.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.37.txz

Updated packages for Slackware x86_64 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/sendmail-8.14.9-x86_64-1_slack13.37.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.37.txz

Updated packages for Slackware 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/sendmail-8.14.9-i486-1_slack14.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.0.txz

Updated packages for Slackware x86_64 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/sendmail-8.14.9-x86_64-1_slack14.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.0.txz

Updated packages for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/sendmail-8.14.9-i486-1_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.1.txz

Updated packages for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/sendmail-8.14.9-x86_64-1_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.1.txz

Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/sendmail-8.14.9-i486-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/sendmail-cf-8.14.9-noarch-1.txz

Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/sendmail-8.14.9-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/sendmail-cf-8.14.9-noarch-1.txz


MD5 signatures:
+-------------+

Slackware 13.0 packages:
fa4a8146cc1d3f1c64b3ed02d82a5faf  sendmail-8.14.9-i486-1_slack13.0.txz
22fd87b5cd412a9ae2d9993adc167a8a  sendmail-cf-8.14.9-noarch-1_slack13.0.txz

Slackware x86_64 13.0 packages:
4c5d225f0d887bc47b9f1732856ec970  sendmail-8.14.9-x86_64-1_slack13.0.txz
f9edfa9c0c9b8f7e2d7781a712653ba3  sendmail-cf-8.14.9-noarch-1_slack13.0.txz

Slackware 13.1 packages:
b836282e7789c12a85a623ed2fb483d5  sendmail-8.14.9-i486-1_slack13.1.txz
bd43cc44d04f8358cf18c90c0ac5e0be  sendmail-cf-8.14.9-noarch-1_slack13.1.txz

Slackware x86_64 13.1 packages:
27faf0d92afbddef85c5566db5601e98  sendmail-8.14.9-x86_64-1_slack13.1.txz
a8ff81ab84f0c841e2124ed4f7fb02b9  sendmail-cf-8.14.9-noarch-1_slack13.1.txz

Slackware 13.37 packages:
25d578ec57d003453578ac1c9043ad36  sendmail-8.14.9-i486-1_slack13.37.txz
a2a53c192144492a6a357fa4813a78a4  sendmail-cf-8.14.9-noarch-1_slack13.37.txz

Slackware x86_64 13.37 packages:
c2199fd085e5855152e083fa13089ba8  sendmail-8.14.9-x86_64-1_slack13.37.txz
9b7be74bb260e610c652e7e0e03fae38  sendmail-cf-8.14.9-noarch-1_slack13.37.txz

Slackware 14.0 packages:
1ae72cadb783eec732ff4ac3da94fc57  sendmail-8.14.9-i486-1_slack14.0.txz
04d4668660a821f5775318de9c452933  sendmail-cf-8.14.9-noarch-1_slack14.0.txz

Slackware x86_64 14.0 packages:
42173bd2b938b0367028e9dc01f602e1  sendmail-8.14.9-x86_64-1_slack14.0.txz
1bbbd2139300d32a37cd1fd549cc046e  sendmail-cf-8.14.9-noarch-1_slack14.0.txz

Slackware 14.1 packages:
3d0fbb8f49881337177d160fa2e0ccd4  sendmail-8.14.9-i486-1_slack14.1.txz
3b783f2b5e32961a3c928f65db789f49  sendmail-cf-8.14.9-noarch-1_slack14.1.txz

Slackware x86_64 14.1 packages:
a9c2336c5e69f7611747cdee78cc9382  sendmail-8.14.9-x86_64-1_slack14.1.txz
7634c0e90e4d51513e32d6937e5f5d96  sendmail-cf-8.14.9-noarch-1_slack14.1.txz

Slackware -current packages:
dc92ad4bbd47b4d10de025319f7f4cc2  n/sendmail-8.14.9-i486-1.txz
86e29ae8991376c26f217e87c1402579  n/sendmail-cf-8.14.9-noarch-1.txz

Slackware x86_64 -current packages:
5fa19ff5c89efd970fc938432541625d  n/sendmail-8.14.9-x86_64-1.txz
23f2daa6bdd71d0294a1b8da3132c0cb  n/sendmail-cf-8.14.9-noarch-1.txz


Installation instructions:
+------------------------+

Upgrade the packages as root:
# upgradepkg sendmail-8.14.9-i486-1_slack14.1.txz sendmail-cf-8.14.9-noarch-1_slack14.1.txz

Then, restart sendmail:
# sh /etc/rc.d/rc.sendmail restart


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com
 
< Prev   Next >
    
Partner

 

Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Yesterday's Edition
Ottawa Linux Symposium: May get by with a little help from its friends
Black Hat 2014: How to crack just about everything
NSA Playset, 911 hacked and war cats: A wild ride at DEF CON 22
More Details of Onion/Critroni Crypto Ransomware Emerge
Is there Another NSA Leaker? Updated
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2014 Guardian Digital, Inc. All rights reserved.