[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[debian-users:47180] [Translate] [SECURITY] [DSA 1164-1] New sendmail packages fix denial of service

From: Seiji Kaneko <skaneko@xxxxxxxxxxxx>
Subject: [debian-users:47180] [Translate] [SECURITY] [DSA 1164-1] New sendmail packages fix denial of service
Date: Thu, 31 Aug 2006 20:37:57 +0900
List-help: <mailto:debian-users-ctl@debian.or.jp?body=help>
List-id: debian-users.debian.or.jp
List-owner: <mailto:debian-users-admin@debian.or.jp>
List-post: <mailto:debian-users@debian.or.jp>
List-software: fml [fml 4.0.3 release (20011202/4.0.3)]
List-unsubscribe: <mailto:debian-users-ctl@debian.or.jp?body=unsubscribe>
X-ml-info: If you have a question, send e-mail with the body "help" (without quotes) to the address debian-users-ctl@debian.or.jp; help=<mailto:debian-users-ctl@debian.or.jp?body=help>
X-ml-name: debian-users
X-mlserver: fml [fml 4.0.3 release (20011202/4.0.3)]; post only (only members can post)
X-original-to: debian-users@debian.or.jp
Message-id: <44F6CA04.50306@xxxxxxxxxxxx>
X-mail-count: 47180
User-agent: Thunderbird 1.5.0.5 (Macintosh/20060719)
かねこです。
URL 等は Debian-security-announce メーリングリストの元記事を確認
ください。

------>8------------>8------------>8------------>8------------>8-
- --------------------------------------------------------------------------
Debian Security Advisory DSA 1164-1                    security@debian.org
http://www.debian.org/security/                             Noah Meyerhans
August 31st, 2006                       http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : sendmail
Vulnerability  : プログラムミス
Problem-Type   : リモート
Debian-specific: いいえ
CVE ID         : CVE-2006-4434
BugTraq ID     : 19714
Debian Bug     : 385054

Debian での MTA のひとつ sendmail にプログラムミスが発見されました。この欠
陥はリモートの攻撃者から特殊な形式の電子メールで攻撃でき、sendmail プロセ
スをクラッシュさせることが可能です。

このアップデートをインストールするには、DSA 1155-2 で説明したとおり、
proposed update アーカイブの libsasl2 パッケージが必要です。


安定版  (stable) ディストリビューション (sarge) では、この問題はバージョン
8.13.3-3sarge3 で修正されています。

不安定版 (unstable) ディストリビューション (sid) では、この問題はバージョ
ン 8.13.8-1 で修正されています。

直ぐに sendmail パッケージをアップグレードすることを勧めます。


アップグレード手順
------------------

wget url
        	でファイルを取得できます。
dpkg -i file.deb
                で参照されたファイルをインストールできます。

apt-get パッケージマネージャを用いている場合には、本メールのフッタ記載の
行を sources.list に加えて、

apt-get update
        を実行して内部データベースを更新し、
apt-get upgrade
        によって修正されたパッケージをインストールしてください。

本メールのフッタ記載の設定を自ホストの設定に加えることにより、自動更新を
行うこともできます。


Debian GNU/Linux 3.1 愛称 sarge
- --------------------------------

  ソースアーカイブ:

    http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13.4-3sarge3.dsc
      Size/MD5 checksum:      911 89bbdc6b7a1d33146d978408ac7feee2
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13.4-3sarge3.diff.gz
      Size/MD5 checksum:   385075 a1408b377f382dacfc7d87ef880af60b
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13.4.orig.tar.gz
      Size/MD5 checksum:  1968047 d80dc659df96c63d227ed80c0c71b708

  Architecture independent components:

    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-base_8.13.4-3sarge3_all.deb
      Size/MD5 checksum:   340668 0fd9a5ace798e807cbc60b7a31919a28
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-cf_8.13.4-3sarge3_all.deb
      Size/MD5 checksum:   279382 1e8db425833f332fa8a525dc107e4614
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8.13.4-3sarge3_all.deb
      Size/MD5 checksum:   692570 b07b9cfd99ee3bfe38feb62ec408d494
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13.4-3sarge3_all.deb
      Size/MD5 checksum:   192242 ce9a17d66058281af9d69563e11c910c

  Alpha architecture:

    http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge3_alpha.deb
      Size/MD5 checksum:   319082 223ecb915309c2f467fee4dc70dbb29a
    http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge3_alpha.deb
      Size/MD5 checksum:   215652 ed63343a42038fdbf292d20e582a9fa3
    http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge3_alpha.deb
      Size/MD5 checksum:   228890 8d087fceb3d923f4892d550419fe6f88
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge3_alpha.deb
      Size/MD5 checksum:   953980 f50d2db2a52e150ec7466750a5e44bc5
    http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge3_alpha.deb
      Size/MD5 checksum:   198182 af2d885e481c00326b2353a071df40b9

  AMD64 architecture:

    http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge3_amd64.deb
      Size/MD5 checksum:   296634 6bd8032a3c89d24f918c544ec87794cc
    http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge3_amd64.deb
      Size/MD5 checksum:   213268 41723080176c78d5f2cf1d5764bba131
    http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge3_amd64.deb
      Size/MD5 checksum:   225344 27729b95e621ad6fc194e45c845268c7
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge3_amd64.deb
      Size/MD5 checksum:   851254 4928097e8c69f01e33d29bd0e371e796
    http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge3_amd64.deb
      Size/MD5 checksum:   197736 f5e2dde229ccd6457323c6d7dc746420

  ARM architecture:

    http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge3_arm.deb
      Size/MD5 checksum:   291974 abf756019dd7a2f75b3bc5c6fc858ec0
    http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge3_arm.deb
      Size/MD5 checksum:   211618 bc7b0597b85aeedbd891d1782aea9b0f
    http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge3_arm.deb
      Size/MD5 checksum:   223712 904f2d271dd078850291aa63fed9c077
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge3_arm.deb
      Size/MD5 checksum:   829384 96686dd8dcd45be34f2f34f64222f558
    http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge3_arm.deb
      Size/MD5 checksum:   197276 714fd487ba82221cf9261d61c833b20b

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge3_hppa.deb
      Size/MD5 checksum:   301562 6991aa63aa29e3753ea4eda0e74004f6
    http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge3_hppa.deb
      Size/MD5 checksum:   215700 cc89d2e0be9162c065467bfb3e5fc5e8
    http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge3_hppa.deb
      Size/MD5 checksum:   229448 4ed50645b31de5c3b7747286a1de8ce9
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge3_hppa.deb
      Size/MD5 checksum:   919852 50e486568dec792055f001172a38d45c
    http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge3_hppa.deb
      Size/MD5 checksum:   198168 3802ef117e38733a991721a6e70167a5

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge3_i386.deb
      Size/MD5 checksum:   287344 23bd405e21c9de501d7e8957ed5b2eae
    http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge3_i386.deb
      Size/MD5 checksum:   211730 2edbe3c6b12742657071e43618211f97
    http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge3_i386.deb
      Size/MD5 checksum:   222522 907a59032ba64011292bbff04e001409
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge3_i386.deb
      Size/MD5 checksum:   812646 8dc795ba8ffc47659d95f727c20c4711
    http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge3_i386.deb
      Size/MD5 checksum:   197428 64eab16e247f5ed9af468e2e804a3e53

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge3_ia64.deb
      Size/MD5 checksum:   330754 6f32b98862faace5980f5a809acbdbf7
    http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge3_ia64.deb
      Size/MD5 checksum:   220496 f94e024b1d70452c6e31aae8032c80cf
    http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge3_ia64.deb
      Size/MD5 checksum:   239734 77b337f036edd22ffee5bcd26ccc53fd
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge3_ia64.deb
      Size/MD5 checksum:  1162690 39b68375190c0ed7b7f6ec42cc08feb3
    http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge3_ia64.deb
      Size/MD5 checksum:   199028 ac0d46969e6f38ba6ea9695ba012fb83

  Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge3_m68k.deb
      Size/MD5 checksum:   272860 8b2a2e0cb36979ec484ae21ee7b952f3
    http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge3_m68k.deb
      Size/MD5 checksum:   210922 2c80dc1697abb910900d9dea976e0111
    http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge3_m68k.deb
      Size/MD5 checksum:   218922 63292f132b4c14935d66eafbd10c8b59
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge3_m68k.deb
      Size/MD5 checksum:   728606 396de790dcc5135069bbb4374c27ae41
    http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge3_m68k.deb
      Size/MD5 checksum:   197236 9241946b199056978336c255c072d348

  Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge3_mips.deb
      Size/MD5 checksum:   293200 0e8866145d40f303d076b2529038bad3
    http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge3_mips.deb
      Size/MD5 checksum:   212100 55ba2084a7d0b43994a8c983c11e08d8
    http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge3_mips.deb
      Size/MD5 checksum:   227434 c559e338459cefee76c1a2ab3efc40e6
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge3_mips.deb
      Size/MD5 checksum:   883544 29e2b015a7e86d0ef26a779b73e23c11
    http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge3_mips.deb
      Size/MD5 checksum:   198194 3fd107d5b11c0b83d6894b360f5d2f2e

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge3_mipsel.deb
      Size/MD5 checksum:   293842 787fb9e91e842e7f712396a8d585da95
    http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge3_mipsel.deb
      Size/MD5 checksum:   212282 4e19166d5eb89e0d30dd0a632f0efba3
    http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge3_mipsel.deb
      Size/MD5 checksum:   227590 aa971533751193be6b37b1616f321cad
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge3_mipsel.deb
      Size/MD5 checksum:   886922 98ee38b69275c0dd03425316c8c288bc
    http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge3_mipsel.deb
      Size/MD5 checksum:   198222 a04e73c2282781f36cd8323297f5d5b0

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge3_powerpc.deb
      Size/MD5 checksum:   294438 1a5d40faaf7c440b9a37c808df4bd252
    http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge3_powerpc.deb
      Size/MD5 checksum:   214504 ea3bd8e59d8d2a9987fde2a5bbc1073b
    http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge3_powerpc.deb
      Size/MD5 checksum:   226918 25f3b5b6310e41eb0f151dfddc556caa
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge3_powerpc.deb
      Size/MD5 checksum:   865018 88a5ffaa0bbc0c856c0402f9bc4a9479
    http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge3_powerpc.deb
      Size/MD5 checksum:   197786 0959fe3b6f7e445abed6b5f2c9992684

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge3_s390.deb
      Size/MD5 checksum:   295212 e6095777105434012463b4e3009cb332
    http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge3_s390.deb
      Size/MD5 checksum:   213348 0bda9d806c5006edea39afecae1ad329
    http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge3_s390.deb
      Size/MD5 checksum:   228722 90e47d3b0839b7ad337b29a3b212ee09
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge3_s390.deb
      Size/MD5 checksum:   875318 9c6a10583814ce3ba0b0fcde1aab1893
    http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge3_s390.deb
      Size/MD5 checksum:   197708 f03a2ce3e1d9644eef33a805e42f3705

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge3_sparc.deb
      Size/MD5 checksum:   285462 76b0de0933652b1010ec2ac044b8081b
    http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge3_sparc.deb
      Size/MD5 checksum:   211670 8fd780da99800d30ab26755790b37eb6
    http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge3_sparc.deb
      Size/MD5 checksum:   222924 5cc657807e798fb6dfc6910c4d3c13ae
    http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge3_sparc.deb
      Size/MD5 checksum:   819536 232fadedc528ab4962c543796a277055
    http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge3_sparc.deb
      Size/MD5 checksum:   197440 a6775780418e0729d016ae80774b336d


      これらのファイルは次の版の安定版リリース時そちらに移されます。


- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

------>8------------>8------------>8------------>8------------>8-
-- 
Seiji Kaneko                         skaneko@xxxxxxxxxxxx
---------------------------------------------------------
Prev by Date: [debian-users:47179] [Translate] [SECURITY] [DSA 1163-1] New gtetrinet packages fix arbitrary code execution
Previous by thread: [debian-users:47179] [Translate] [SECURITY] [DSA 1163-1] New gtetrinet packages fix arbitrary code execution
Index(es):
- Date
- Thread