Public bug reported:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
affects distros/ubuntu/sendmail
status confirmed
subscribe ubuntu-archive
Please sync sendmail (universe) from Debian unstable (main).
Changelog since current edgy version 8.13.7-2:
sendmail (8.13.8-2) unstable; urgency=low
* /var/lib/sendmail must not be group-writable, but
/var/lib/sendmail/dead.letter must be
closes: #385440, #385502
* apply patch to stop assertion with -bs
-- Richard A Nelson (Rick) <[EMAIL PROTECTED]> Fri, 01 Sep 2006
04:57:00 -0000
sendmail (8.13.8-1) unstable; urgency=high
* CVE-2006-4434: sendmail 8.13.8 fixes remote DoS vulnerability
use-after-free vulnerability in Sendmail before 8.13.8
closes: #385054
* I hadn't released this earlier because I had the 8.13.7 errata
patches in 8.13.7-2, so it didn't look like a big deal.
-- Richard A Nelson (Rick) <[EMAIL PROTECTED]> Tue, 29 Aug 2006
14:00:00 -0000
sendmail (8.13.8-0) private; urgency=low
* New upstream - not much new (already had the errata in 8.13.7-2)
* Refit patches
* /var/lib/sendmail needs to be writable by smmsp for dead.letter
-- Richard A Nelson (Rick) <[EMAIL PROTECTED]> Wed, 09 Aug 2006
16:50:00 -0000
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
iD8DBQFE+9sRDecnbV4Fd/IRAsNgAJ9k9iRXUuJUg7lTE62cf3RIzLV3PwCg2mpP
LkLTIHSwBwkdPTjenFZirDE=
=m7gd
-----END PGP SIGNATURE-----
** Affects: sendmail (Ubuntu)
Importance: Untriaged
Status: Confirmed
--
Please sync sendmail (universe) from unstable (main)
https://launchpad.net/bugs/58817
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
