Issued:
2006-06-14
Updated:
2006-06-27

RHSA-2006:0515 - Security Advisory

Synopsis

sendmail security update

Type/Severity

Security Advisory: Important

Topic

Updated sendmail packages are now available to fix a denial of service
security issue.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

[Updated 27 June 2006]
The sendmail-docs packages for Red Hat Enterprise Linux 3 have been updated
to the correct version and release.

Description

Sendmail is a Mail Transport Agent (MTA) used to send mail between machines.

A flaw in the handling of multi-part MIME messages was discovered in
Sendmail. A remote attacker could create a carefully crafted message that
could crash the sendmail process during delivery (CVE-2006-1173). By
default on Red Hat Enterprise Linux, Sendmail is configured to only accept
connections from the local host. Therefore, only users who have configured
Sendmail to listen to remote hosts would be remotely vulnerable to this issue.

Users of Sendmail are advised to upgrade to these erratum packages, which
contain a backported patch from the Sendmail team to correct this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Server 2 ia64
  • Red Hat Enterprise Linux Server 2 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Workstation 2 ia64
  • Red Hat Enterprise Linux Workstation 2 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

(none)

CVEs

References

Red Hat Enterprise Linux Server 4

SRPM
x86_64
sendmail-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 174267ed0f18594cca8e1ddab982405d852b81786f10d10641076805eea37e18
sendmail-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 174267ed0f18594cca8e1ddab982405d852b81786f10d10641076805eea37e18
sendmail-cf-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 2c5141f0521bf9a9b214152ed3db1a7465d3f329967d7fcb90cad5fb8ce9f09f
sendmail-cf-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 2c5141f0521bf9a9b214152ed3db1a7465d3f329967d7fcb90cad5fb8ce9f09f
sendmail-devel-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 58ec5a619762985bc68c836592ba3637b263ec5fafd5966468664646a4c277e2
sendmail-devel-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 58ec5a619762985bc68c836592ba3637b263ec5fafd5966468664646a4c277e2
sendmail-doc-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 578730c261e360f11a8a291ca3f2f722b89ad0f8044c347de901191695ecb628
sendmail-doc-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 578730c261e360f11a8a291ca3f2f722b89ad0f8044c347de901191695ecb628
ia64
sendmail-8.13.1-3.RHEL4.5.ia64.rpm SHA-256: 360adfccbc69bf95885ebc4214aa3b940d574e110cc50a5402332fbb398a77f6
sendmail-8.13.1-3.RHEL4.5.ia64.rpm SHA-256: 360adfccbc69bf95885ebc4214aa3b940d574e110cc50a5402332fbb398a77f6
sendmail-cf-8.13.1-3.RHEL4.5.ia64.rpm SHA-256: 832243da04adc412fb2fe6d811c12847b24addad9b6c74d8740f86e21d373326
sendmail-cf-8.13.1-3.RHEL4.5.ia64.rpm SHA-256: 832243da04adc412fb2fe6d811c12847b24addad9b6c74d8740f86e21d373326
sendmail-devel-8.13.1-3.RHEL4.5.ia64.rpm SHA-256: 08a1f24f48f8063aff9a82cc99941bac42edbdb050e171baf4d7b6f7a7d286ac
sendmail-devel-8.13.1-3.RHEL4.5.ia64.rpm SHA-256: 08a1f24f48f8063aff9a82cc99941bac42edbdb050e171baf4d7b6f7a7d286ac
sendmail-doc-8.13.1-3.RHEL4.5.ia64.rpm SHA-256: 7a1cc1b9cc2ee21a4b00436d8d8d85c510442a295e78894dc820caadc1bd2339
sendmail-doc-8.13.1-3.RHEL4.5.ia64.rpm SHA-256: 7a1cc1b9cc2ee21a4b00436d8d8d85c510442a295e78894dc820caadc1bd2339
i386
sendmail-8.13.1-3.RHEL4.5.i386.rpm SHA-256: 87587f8b66f7e8ceb92ca61c2429a93262fa76b1e2b1862c5feaa888c987d612
sendmail-8.13.1-3.RHEL4.5.i386.rpm SHA-256: 87587f8b66f7e8ceb92ca61c2429a93262fa76b1e2b1862c5feaa888c987d612
sendmail-cf-8.13.1-3.RHEL4.5.i386.rpm SHA-256: 0846e8484a8ae28f6dce97864742a5293b5f604d291d52be4302b1fcfe14944c
sendmail-cf-8.13.1-3.RHEL4.5.i386.rpm SHA-256: 0846e8484a8ae28f6dce97864742a5293b5f604d291d52be4302b1fcfe14944c
sendmail-devel-8.13.1-3.RHEL4.5.i386.rpm SHA-256: f1e12b01f0f57c4b396c67189faf880802ec204993def730f70bb8deab660146
sendmail-devel-8.13.1-3.RHEL4.5.i386.rpm SHA-256: f1e12b01f0f57c4b396c67189faf880802ec204993def730f70bb8deab660146
sendmail-doc-8.13.1-3.RHEL4.5.i386.rpm SHA-256: 9e56afab7d7005da0f6fb50b5b1a6e21446cc5c94b800efbf0707ce6a42009f3
sendmail-doc-8.13.1-3.RHEL4.5.i386.rpm SHA-256: 9e56afab7d7005da0f6fb50b5b1a6e21446cc5c94b800efbf0707ce6a42009f3

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
sendmail-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 174267ed0f18594cca8e1ddab982405d852b81786f10d10641076805eea37e18
sendmail-cf-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 2c5141f0521bf9a9b214152ed3db1a7465d3f329967d7fcb90cad5fb8ce9f09f
sendmail-devel-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 58ec5a619762985bc68c836592ba3637b263ec5fafd5966468664646a4c277e2
sendmail-doc-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 578730c261e360f11a8a291ca3f2f722b89ad0f8044c347de901191695ecb628
ia64
sendmail-8.13.1-3.RHEL4.5.ia64.rpm SHA-256: 360adfccbc69bf95885ebc4214aa3b940d574e110cc50a5402332fbb398a77f6
sendmail-cf-8.13.1-3.RHEL4.5.ia64.rpm SHA-256: 832243da04adc412fb2fe6d811c12847b24addad9b6c74d8740f86e21d373326
sendmail-devel-8.13.1-3.RHEL4.5.ia64.rpm SHA-256: 08a1f24f48f8063aff9a82cc99941bac42edbdb050e171baf4d7b6f7a7d286ac
sendmail-doc-8.13.1-3.RHEL4.5.ia64.rpm SHA-256: 7a1cc1b9cc2ee21a4b00436d8d8d85c510442a295e78894dc820caadc1bd2339
i386
sendmail-8.13.1-3.RHEL4.5.i386.rpm SHA-256: 87587f8b66f7e8ceb92ca61c2429a93262fa76b1e2b1862c5feaa888c987d612
sendmail-cf-8.13.1-3.RHEL4.5.i386.rpm SHA-256: 0846e8484a8ae28f6dce97864742a5293b5f604d291d52be4302b1fcfe14944c
sendmail-devel-8.13.1-3.RHEL4.5.i386.rpm SHA-256: f1e12b01f0f57c4b396c67189faf880802ec204993def730f70bb8deab660146
sendmail-doc-8.13.1-3.RHEL4.5.i386.rpm SHA-256: 9e56afab7d7005da0f6fb50b5b1a6e21446cc5c94b800efbf0707ce6a42009f3

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
sendmail-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 174267ed0f18594cca8e1ddab982405d852b81786f10d10641076805eea37e18
sendmail-cf-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 2c5141f0521bf9a9b214152ed3db1a7465d3f329967d7fcb90cad5fb8ce9f09f
sendmail-devel-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 58ec5a619762985bc68c836592ba3637b263ec5fafd5966468664646a4c277e2
sendmail-doc-8.13.1-3.RHEL4.5.x86_64.rpm SHA-256: 578730c261e360f11a8a291ca3f2f722b89ad0f8044c347de901191695ecb628
i386
sendmail-8.13.1-3.RHEL4.5.i386.rpm SHA-256: 87587f8b66f7e8ceb92ca61c2429a93262fa76b1e2b1862c5feaa888c987d612
sendmail-cf-8.13.1-3.RHEL4.5.i386.rpm SHA-256: 0846e8484a8ae28f6dce97864742a5293b5f604d291d52be4302b1fcfe14944c
sendmail-devel-8.13.1-3.RHEL4.5.i386.rpm SHA-256: f1e12b01f0f57c4b396c67189faf880802ec204993def730f70bb8deab660146
sendmail-doc-8.13.1-3.RHEL4.5.i386.rpm SHA-256: 9e56afab7d7005da0f6fb50b5b1a6e21446cc5c94b800efbf0707ce6a42009f3

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
sendmail-8.13.1-3.RHEL4.5.s390x.rpm SHA-256: 73c63adc19780caeb96142feabe57cb81a9f9e23456bd614ba46e3c56db484cf
sendmail-cf-8.13.1-3.RHEL4.5.s390x.rpm SHA-256: 2cefa0e5df48f11b1c16a8acc73514293261efd4100f207de94a94d3cdb6a918
sendmail-devel-8.13.1-3.RHEL4.5.s390x.rpm SHA-256: 1db2ea379ca7281b21480de8d70d072e4ba3b837943413da93869f8e71fb966e
sendmail-doc-8.13.1-3.RHEL4.5.s390x.rpm SHA-256: 83f26db0ab4b4959e2c04e78ef7d80a24534fdab819b3829f89e354ea4667189
s390
sendmail-8.13.1-3.RHEL4.5.s390.rpm SHA-256: a842178f0df71b7359a7e5047ee9e2141215cff43cf0eab6f3e35fcf6db9611d
sendmail-cf-8.13.1-3.RHEL4.5.s390.rpm SHA-256: 08af4d968723b2b9746796f455ef5f3b1e4ea7442ddbfb11fcd7ae5aa7f06371
sendmail-devel-8.13.1-3.RHEL4.5.s390.rpm SHA-256: 2de54cd3de8e28712b8def8dd8659f161dfeac88bd853d2a2a2a14696f9ccdd0
sendmail-doc-8.13.1-3.RHEL4.5.s390.rpm SHA-256: bec8cdac3c26a97254316d029189356acf18d150846d26bdcf4a6e10aceb7053

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
sendmail-8.13.1-3.RHEL4.5.ppc.rpm SHA-256: 355d5e923273edb582e3488b1eeb00ef95b6ff2511ffe5a8e4f8b0c39de22fd6
sendmail-cf-8.13.1-3.RHEL4.5.ppc.rpm SHA-256: 9ace0974f971b5680d8dd1477fb4628c5302aaa44122d25331924e322153422a
sendmail-devel-8.13.1-3.RHEL4.5.ppc.rpm SHA-256: b51ce9e03162d14e2e45b892cd2c49cbdf918212ff39579975d16b078c44951c
sendmail-doc-8.13.1-3.RHEL4.5.ppc.rpm SHA-256: 1176219cadcd222243c791f03f3d4646b50a9477bc1d3acdab4f0efdf83660a7

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.