UbuntuUpdates.org

Package "sendmail"

Name: sendmail

Description:

powerful, efficient, and scalable Mail Transport Agent
Latest version: 8.14.4-4.1ubuntu1.1
Release: trusty (14.04)
Level: updates
Repository: universe
Homepage: http://www.sendmail.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "sendmail"

All arch deb package
APT INSTALL

Other versions of "sendmail" in Trusty

Repository Area Version
base main 8.14.4-4.1ubuntu1
base universe 8.14.4-4.1ubuntu1
security main 8.14.4-4.1ubuntu1.1
security universe 8.14.4-4.1ubuntu1.1
updates main 8.14.4-4.1ubuntu1.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 8.14.4-4.1ubuntu1.1 2019-02-05 22:06:46 UTC

  sendmail (8.14.4-4.1ubuntu1.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Local users to access unintended high-numbered file
    descriptors via a custom mail-delivery program.
    - debian/patches/8.14/8.14.4/close_on_exec.patch: Properly set the
      close-on-exec flag for file descriptors before executing mailers.
    - CVE-2014-3956

 -- Eduardo Barretto <email address hidden> Tue, 05 Feb 2019 13:10:24 -0200
CVE-2014-3956 The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXE


About   -   Send Feedback to @ubuntu_updates