[4964] in RedHat Linux List
Re: SECURITY: Important fix for sendmail
daemon@ATHENA.MIT.EDU (Cristian Gafton)
Mon Nov 18 11:23:48 1996
Date: Mon, 18 Nov 1996 18:20:44 +0200 (EET)
From: Cristian Gafton <gafton@sorosis.ro>
To: redhat-list@redhat.com
In-Reply-To: <Pine.LNX.3.93.961118111215.32513B-100000@redhat.com>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
On Mon, 18 Nov 1996, Erik Troan wrote:
> Sure, here it is:
>
> --- sendmail-8.7.6/src/main.c.moron Mon Nov 18 09:43:47 1996
> +++ sendmail-8.7.6/src/main.c Mon Nov 18 09:44:03 1996
> @@ -1697,6 +1697,8 @@
> syslog(LOG_INFO, "restarting %s on signal", SaveArgv[0]);
> #endif
> releasesignal(SIGHUP);
> + (void) setgid(RealGid);
> + (void) setuid(RealUid);
> execv(SaveArgv[0], (ARGV_T) SaveArgv);
> #ifdef LOG
> if (LogLevel > 0)
This one is also included on my packages available from
ftp://ftp.sorosis.ro/pub/linux/local/fixes/
or
ftp://sysadm.sorosis.ro/pub/fixes/
I have produced patched 8.8.2 packages, and I intend to build 8.8.3
packages (8.8.3 includes the official fix for this bug). Anyone using my
packages have any problems so far from migrating to sendmail 8.8 from
8.7 ?
Best regards,
Cristian Gafton
--
--------------------------------------------------------------------
Cristian Gafton gafton@sorosis.ro
Computers & Communications Center Network Administrator
35 Moara de Foc St., Iasi 6600, ROMANIA Tel: +40-32-252938
http://www.cccis.ro Fax: +40-32-252933
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
UNIX is user friendly. It's just selective about who its friends are.
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
