[slackware-security] sendmail (SSA:2014-156-04)

[slackware-security]  sendmail (SSA:2014-156-04)

New sendmail packages are available for Slackware 13.0, 13.1, 13.37, 14.0,
14.1, and -current to fix a security issue.


Here are the details from the Slackware 14.1 ChangeLog:
+--------------------------+
patches/packages/sendmail-8.14.9-i486-1_slack14.1.txz:  Upgraded.
  This release fixes one security related bug by properly closing file
  descriptors (except stdin, stdout, and stderr) before executing programs.
  This bug could enable local users to interfere with an open SMTP
  connection if they can execute their own program for mail delivery
  (e.g., via procmail or the prog mailer).
  For more information, see:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3956
  (* Security fix *)
patches/packages/sendmail-cf-
8.14.9-noarch-1_slack14.1.txz:  Upgraded.
+--------------------------+




Where to find the new packages:
+-----------------------------+

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project!  :-)

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated packages for Slackware 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/sendmail-8.14.9-i486-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.0.txz

Updated packages for Slackware x86_64 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/sendmail-8.14.9-x86_64-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.0.txz

Updated packages for Slackware 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/sendmail-8.14.9-i486-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.1.txz

Updated packages for Slackware x86_64 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/sendmail-8.14.9-x86_64-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.1.txz

Updated packages for Slackware 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/sendmail-8.14.9-i486-1_slack13.37.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.37.txz

Updated packages for Slackware x86_64 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/sendmail-8.14.9-x86_64-1_slack13.37.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/sendmail-cf-8.14.9-noarch-1_slack13.37.txz

Updated packages for Slackware 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/sendmail-8.14.9-i486-1_slack14.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.0.txz

Updated packages for Slackware x86_64 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/sendmail-8.14.9-x86_64-1_slack14.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.0.txz

Updated packages for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/sendmail-8.14.9-i486-1_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.1.txz

Updated packages for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/sendmail-8.14.9-x86_64-1_slack14.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/sendmail-cf-8.14.9-noarch-1_slack14.1.txz

Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/sendmail-8.14.9-i486-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/sendmail-cf-8.14.9-noarch-1.txz

Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/sendmail-8.14.9-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/sendmail-cf-8.14.9-noarch-1.txz


MD5 signatures:
+-------------+

Slackware 13.0 packages:
fa4a8146cc1d3f1c64b3ed02d82a5faf  sendmail-8.14.9-i486-1_slack13.0.txz
22fd87b5cd412a9ae2d9993adc167a8a  sendmail-cf-8.14.9-noarch-1_slack13.0.txz

Slackware x86_64 13.0 packages:
4c5d225f0d887bc47b9f1732856ec970  sendmail-8.14.9-x86_64-1_slack13.0.txz
f9edfa9c0c9b8f7e2d7781a712653ba3  sendmail-cf-8.14.9-noarch-1_slack13.0.txz

Slackware 13.1 packages:
b836282e7789c12a85a623ed2fb483d5  sendmail-8.14.9-i486-1_slack13.1.txz
bd43cc44d04f8358cf18c90c0ac5e0be  sendmail-cf-8.14.9-noarch-1_slack13.1.txz

Slackware x86_64 13.1 packages:
27faf0d92afbddef85c5566db5601e98  sendmail-8.14.9-x86_64-1_slack13.1.txz
a8ff81ab84f0c841e2124ed4f7fb02b9  sendmail-cf-8.14.9-noarch-1_slack13.1.txz

Slackware 13.37 packages:
25d578ec57d003453578ac1c9043ad36  sendmail-8.14.9-i486-1_slack13.37.txz
a2a53c192144492a6a357fa4813a78a4  sendmail-cf-8.14.9-noarch-1_slack13.37.txz

Slackware x86_64 13.37 packages:
c2199fd085e5855152e083fa13089ba8  sendmail-8.14.9-x86_64-1_slack13.37.txz
9b7be74bb260e610c652e7e0e03fae38  sendmail-cf-8.14.9-noarch-1_slack13.37.txz

Slackware 14.0 packages:
1ae72cadb783eec732ff4ac3da94fc57  sendmail-8.14.9-i486-1_slack14.0.txz
04d4668660a821f5775318de9c452933  sendmail-cf-8.14.9-noarch-1_slack14.0.txz

Slackware x86_64 14.0 packages:
42173bd2b938b0367028e9dc01f602e1  sendmail-8.14.9-x86_64-1_slack14.0.txz
1bbbd2139300d32a37cd1fd549cc046e  sendmail-cf-8.14.9-noarch-1_slack14.0.txz

Slackware 14.1 packages:
3d0fbb8f49881337177d160fa2e0ccd4  sendmail-8.14.9-i486-1_slack14.1.txz
3b783f2b5e32961a3c928f65db789f49  sendmail-cf-8.14.9-noarch-1_slack14.1.txz

Slackware x86_64 14.1 packages:
a9c2336c5e69f7611747cdee78cc9382  sendmail-8.14.9-x86_64-1_slack14.1.txz
7634c0e90e4d51513e32d6937e5f5d96  sendmail-cf-8.14.9-noarch-1_slack14.1.txz

Slackware -current packages:
dc92ad4bbd47b4d10de025319f7f4cc2  n/sendmail-8.14.9-i486-1.txz
86e29ae8991376c26f217e87c1402579  n/sendmail-cf-8.14.9-noarch-1.txz

Slackware x86_64 -current packages:
5fa19ff5c89efd970fc938432541625d  n/sendmail-8.14.9-x86_64-1.txz
23f2daa6bdd71d0294a1b8da3132c0cb  n/sendmail-cf-8.14.9-noarch-1.txz


Installation instructions:
+------------------------+

Upgrade the packages as root:
# upgradepkg sendmail-8.14.9-i486-1_slack14.1.txz sendmail-cf-8.14.9-noarch-1_slack14.1.txz

Then, restart sendmail:
# sh /etc/rc.d/rc.sendmail restart


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com

+------------------------------------------------------------------------+
| To leave the slackware-security mailing list:                          |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message:                                                     |
|                                                                        |
|   unsubscribe slackware-security                                       |
|                                                                        |
| You will get a confirmation message back containing instructions to    |
| complete the process.  Please do not reply to this email address.      |
+------------------------------------------------------------------------+