RHBA-2015:1299 - Bug Fix Advisory

Topic

Updated sendmail packages that fix several bugs are now available for Red Hat
Enterprise Linux 6.

Description

Sendmail is a Mail Transport Agent (MTA) used to send mail between machines.

This update fixes the following bugs:

• Previously, the sendmail macro MAXHOSTNAMELEN allowed only 63 characters for

the host name length. However, in some cases, it was used against the length of
a fully-qualified domain name (FQDN), which has a maximum length of 255
characters. Consequently, FQDN resolution did not work correctly in some cases.
To fix this bug, MAXHOSTNAMELEN now allows a maximum of 255 characters.
(BZ#640234)

• The sendmail queue runner could previously terminate unexpectedly under

certain circumstances. Consequently, sendmail stopped processing the mail queue.
This update introduces a fix that prevents the source code from triggering an
assertion in the OpenLDAP code when the connection to an LDAP server is lost
while making a query. As a result, the assertion no longer causes the queue
runner to terminate, and sendmail continues processing the mail queue as
expected. (BZ#837007)

• Under certain circumstances, sendmail previously recorded a very large number

of log messages that reported failures to set the close-on-exec flag. The Milter
implementation has been modified to perform socket validation before the fnctl()
function attempts to set close-on-exec. As a result, fnctl() is no longer called
on invalid sockets, and the described log messages no longer occur. (BZ#845821)

• Prior to this update, the ldap_routing feature did not work as expected. If

ldap_routing was used, sendmail reported the "-T<TMPF>" option missing, and the
user was required to insert "-T<TMPF>" manually. With this update, the macro for
generating configuration for ldap_routing has been fixed, and the user is no
longer required to add "-T<TMPF>" manually when using ldap_routing. (BZ#890227)

• Previously, the "{client_port}" value could not be used on little-endian

machines, for example in mail filters, because it was set incorrectly. This
update corrects the "{client_port}" value on little-endian machines.
(BZ#1106852)

Users of sendmail are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 640234 - sendmail applies MAXHOSTNAMELEN for FQDN.
• BZ - 845821 - -milterfdleaks patch causes endless, high frequent log storm
• BZ - 890227 - LDAP-less routing is broken and complains about missing -T<TMPF>
• BZ - 1106852 - sendmail {client_port} not set correctly on little endian machines

CVEs

(none)

References

(none)