Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

Slackware: Bulletin 2023-115-03 Urgent: OpenSSL Vulnerability

slackware
Calendar Grey March 22, 2006
Dist Slackware Esm H88
Recent updates to sendmail software fix a critical vulnerability in Slackware. It is essential to upgrade for the security and reliability of your email system
New sendmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue

Summary

Here are the details from the Slackware 10.2 ChangeLog: patches/packages/sendmail-8.13.6-i486-1.tgz: Upgraded to sendmail-8.13.6. This new version of sendmail contains a fix for a security problem discovered by Mark Dowd of ISS X-Force. From sendmail's advisory: Sendmail was notified by security researchers at ISS that, under some specific timing conditions, this vulnerability may permit a specifically crafted attack to take over the sendmail MTA process, allowing remote attackers to execute commands and run arbitrary programs on the system running the MTA, affecting email delivery, or tampering with other programs and data on this system. Sendmail is not aware of any public exploit code for this vulnerability. This connection-oriented vulnerability does not occur in the normal course of sending and receiving email. It is only triggered when specific conditions are created through SMTP connection layer commands. Sendmail's complete

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security issue sendmail remote command execution Slackware

Where Find New Packages

Updated packages for Slackware 8.1:
Updated packages for Slackware 9.0:
Updated packages for Slackware 9.1:
Updated packages for Slackware 10.0:
Updated packages for Slackware 10.1:
Updated packages for Slackware 10.2:
Updated packages for Slackware -current:

MD5 Signatures

Slackware 8.1 packages: e999863fc475210e60cf1ee0a261c252 sendmail-8.13.6-i386-1.tgz 7afa82a6bc0416a056eb2bed6eec80cc sendmail-cf-8.13.6-noarch-1.tgz
Slackware 9.0 packages: 2f3e3ab6501d7c692c0b60a24576f588 sendmail-8.13.6-i386-1.tgz d9741b293311989533e8fe047cd0edaa sendmail-cf-8.13.6-noarch-1.tgz
Slackware 9.1 packages: f8b27b802cc2d2971648d67b2b3bb8c1 sendmail-8.13.6-i486-1.tgz 81949d02b934c1d0faa60034a712cd2d sendmail-cf-8.13.6-noarch-1.tgz
Slackware 10.0 packages: 58cb92a015c79e0122edf86d0db65ae6 sendmail-8.13.6-i486-1.tgz 503b025e94cb495eeccf12f2531c3fc0 sendmail-cf-8.13.6-noarch-1.tgz
Slackware 10.1 packages: 840ac3cda6c6cd0a7056e356bc4f8160 sendmail-8.13.6-i486-1.tgz 5ba1def76a387c20274a3710681286f6 sendmail-cf-8.13.6-noarch-1.tgz
Slackware 10.2 packages: 68ba3f436ce577463baf0633282aaa45 sendmail-8.13.6-i486-1.tgz 789837f2b7fe8f00851b66780a38fb67 sendmail-cf-8.13.6-noarch-1.tgz
Slackware -current packages: 0e34e5def2ecf92ca4ba82f6a403c079 sendmail-8.13.6-i486-1.tgz 7321cc3bb735164777e7c5c54b23b641 sendmail-cf-8.13.6-noarch-1.tgz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory security issue sendmail remote command execution Slackware

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the packages as root: # upgradepkg sendmail-8.13.6-i486-1.tgz sendmail-cf-8.13.6-noarch-1.tgz Restart sendmail: # . /etc/rc.d/rc.sendmail restart

Related News

Your message here