|
Sendmail DNS Maps Remote Denial of Service Vulnerability
Solution: Red Hat has released an advisory (RHSA-2003:265-01) to address this issue. See referenced advisory for further detail regarding applying fixes. SGI has released a security advisory containing a patch to address this issue in IRIX 6.5.19 - 6.5.21. A patch haS been released for OpenBSD 3.2, however OpenBSD 3.3 was distributed with Sendmail 8.12.9 and therefore is not affected. A patch has been released by FreeBSD to address this issue. It has been confirmed to work on FreeBSD 5.0, 4.8, 4.7, and 4.6 systems. Additional details regarding RELENG releases, and other fixed releases can be found in the attached FreeBSD advisory. Mandrake Linux has released a security advisory containing fixes to address this issue. Conectiva has released a security advisory (CLA-2003:727) that includes fixes to address this issue. SOTLinux has released a security advisory (SLSA-2003:39) that includes fixed to address this issue. HP has released a security bulletin (SSRT3612) for Tru64 UNIX that includes fixes for Sendmail. Please see the attached advisory for details on obtaining and applying fixes. It should be noted that this bulletin has been revised to state that Sendmail versions shipped with Tru64 UNIX 5.1A and 5.1B are not affected by this vulnerability. This issue has been addressed in Sendmail 8.12.9 and users are urged to upgrade as soon as possible. OpenBSD OpenBSD 3.2
RedHat sendmail-8.12.5-7.i386.rpm
RedHat sendmail-devel-8.12.8-4.i386.rpm
RedHat sendmail-doc-8.12.8-4.i386.rpm
RedHat sendmail-doc-8.12.5-7.i386.rpm
RedHat sendmail-cf-8.12.5-7.i386.rpm
RedHat sendmail-cf-8.12.8-4.i386.rpm
RedHat sendmail-devel-8.12.5-7.i386.rpm
RedHat sendmail-8.12.8-4.i386.rpm
FreeBSD FreeBSD 4.6
FreeBSD FreeBSD 4.7
FreeBSD FreeBSD 4.8
FreeBSD FreeBSD 5.0
SGI IRIX 6.5.19
SGI IRIX 6.5.20
SGI IRIX 6.5.21
Sendmail Consortium Sendmail 8.12.1
Sendmail Consortium Sendmail 8.12.2
Sendmail Consortium Sendmail 8.12.3
Sendmail Consortium Sendmail 8.12.4
Sendmail Consortium Sendmail 8.12.5
Sendmail Consortium Sendmail 8.12.6
Sendmail Consortium Sendmail 8.12.7
Sendmail Consortium Sendmail 8.12.8
|
|
 Privacy Statement |
