-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] sendmail (SSA:2014-156-04)
New sendmail packages are available for Slackware 13.0, 13.1, 13.37, 14.0,
14.1, and -current to fix a security issue.
Here are the details from the Slackware 14.1 ChangeLog:
+--------------------------+
patches/packages/sendmail-8.14.9-i486-1_slack14.1.txz: Upgraded.
This release fixes one security related bug by properly closing file
descriptors (except stdin, stdout, and stderr) before executing programs.
This bug could enable local users to interfere with an open SMTP
connection if they can execute their own program for mail delivery
(e.g., via procmail or the prog mailer).
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3956
(* Security fix *)
patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.1.txz: Upgraded.
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated packages for Slackware 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/sendmail-8.14.9-i486-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.0.txz
Updated packages for Slackware x86_64 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/sendmail-8.14.9-x86_64-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.0.txz
Updated packages for Slackware 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/sendmail-8.14.9-i486-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.1.txz
Updated packages for Slackware x86_64 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/sendmail-8.14.9-x86_64-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.1.txz
Updated packages for Slackware 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/sendmail-8.14.9-i486-1_slack13.37.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.37.txz
Updated packages for Slackware x86_64 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/sendmail-8.14.9-x86_64-1_slack13.37.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.37.txz
Updated packages for Slackware 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/sendmail-8.14.9-i486-1_slack14.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.0.txz
Updated packages for Slackware x86_64 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/sendmail-8.14.9-x86_64-1_slack14.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.0.txz
Updated packages for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/sendmail-8.14.9-i486-1_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.1.txz
Updated packages for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/sendmail-8.14.9-x86_64-1_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.1.txz
Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/sendmail-8.14.9-i486-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/sendmail-cf-8.14.9-noarch-1.txz
Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/sendmail-8.14.9-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/sendmail-cf-8.14.9-noarch-1.txz
MD5 signatures:
+-------------+
Slackware 13.0 packages:
fa4a8146cc1d3f1c64b3ed02d82a5faf sendmail-8.14.9-i486-1_slack13.0.txz
22fd87b5cd412a9ae2d9993adc167a8a sendmail-cf-8.14.9-noarch-1_slack13.0.txz
Slackware x86_64 13.0 packages:
4c5d225f0d887bc47b9f1732856ec970 sendmail-8.14.9-x86_64-1_slack13.0.txz
f9edfa9c0c9b8f7e2d7781a712653ba3 sendmail-cf-8.14.9-noarch-1_slack13.0.txz
Slackware 13.1 packages:
b836282e7789c12a85a623ed2fb483d5 sendmail-8.14.9-i486-1_slack13.1.txz
bd43cc44d04f8358cf18c90c0ac5e0be sendmail-cf-8.14.9-noarch-1_slack13.1.txz
Slackware x86_64 13.1 packages:
27faf0d92afbddef85c5566db5601e98 sendmail-8.14.9-x86_64-1_slack13.1.txz
a8ff81ab84f0c841e2124ed4f7fb02b9 sendmail-cf-8.14.9-noarch-1_slack13.1.txz
Slackware 13.37 packages:
25d578ec57d003453578ac1c9043ad36 sendmail-8.14.9-i486-1_slack13.37.txz
a2a53c192144492a6a357fa4813a78a4 sendmail-cf-8.14.9-noarch-1_slack13.37.txz
Slackware x86_64 13.37 packages:
c2199fd085e5855152e083fa13089ba8 sendmail-8.14.9-x86_64-1_slack13.37.txz
9b7be74bb260e610c652e7e0e03fae38 sendmail-cf-8.14.9-noarch-1_slack13.37.txz
Slackware 14.0 packages:
1ae72cadb783eec732ff4ac3da94fc57 sendmail-8.14.9-i486-1_slack14.0.txz
04d4668660a821f5775318de9c452933 sendmail-cf-8.14.9-noarch-1_slack14.0.txz
Slackware x86_64 14.0 packages:
42173bd2b938b0367028e9dc01f602e1 sendmail-8.14.9-x86_64-1_slack14.0.txz
1bbbd2139300d32a37cd1fd549cc046e sendmail-cf-8.14.9-noarch-1_slack14.0.txz
Slackware 14.1 packages:
3d0fbb8f49881337177d160fa2e0ccd4 sendmail-8.14.9-i486-1_slack14.1.txz
3b783f2b5e32961a3c928f65db789f49 sendmail-cf-8.14.9-noarch-1_slack14.1.txz
Slackware x86_64 14.1 packages:
a9c2336c5e69f7611747cdee78cc9382 sendmail-8.14.9-x86_64-1_slack14.1.txz
7634c0e90e4d51513e32d6937e5f5d96 sendmail-cf-8.14.9-noarch-1_slack14.1.txz
Slackware -current packages:
dc92ad4bbd47b4d10de025319f7f4cc2 n/sendmail-8.14.9-i486-1.txz
86e29ae8991376c26f217e87c1402579 n/sendmail-cf-8.14.9-noarch-1.txz
Slackware x86_64 -current packages:
5fa19ff5c89efd970fc938432541625d n/sendmail-8.14.9-x86_64-1.txz
23f2daa6bdd71d0294a1b8da3132c0cb n/sendmail-cf-8.14.9-noarch-1.txz
Installation instructions:
+------------------------+
Upgrade the packages as root:
# upgradepkg sendmail-8.14.9-i486-1_slack14.1.txz sendmail-cf-8.14.9-noarch-1_slack14.1.txz
Then, restart sendmail:
# sh /etc/rc.d/rc.sendmail restart
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
security@xxxxxxxxxxxxx
+------------------------------------------------------------------------+
| To leave the slackware-security mailing list: |
+------------------------------------------------------------------------+
| Send an email to majordomo@xxxxxxxxxxxxx with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back containing instructions to |
| complete the process. Please do not reply to this email address. |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iEYEARECAAYFAlORResACgkQakRjwEAQIjNRJgCgkGbD3EFxMiOAIZuf3AqOsw7c
HV0AnAvIyQvOOSC/L+irb8Paep20bn0T
=loet
-----END PGP SIGNATURE-----
