Re: US-CERT Technical Cyber Security Alert TA06-081A -- Sendmail Race Condition Vulnerability (fwd)

[Jeff Sheltren <sheltren cs ucsb edu>]

On Mar 22, 2006, at 2:29 PM, Kenneth Porter wrote:

> Main alert page: <http://www.kb.cert.org/vuls/id/834865>
>
> Fedora details: <http://www.kb.cert.org/vuls/id/MIMG-6MPU9N>
>
> > From the summary:
>
>   A race condition in Sendmail may allow a remote attacker to execute
>   arbitrary code.
>
> For those of us accepting mail from outside on pre-FC4 Fedora, are  
> any updates in the pipe to address this?

Hi, yes, Jesse is working on updated packages right now.  If you're  
interested, the bugzilla ticket is here:  https://bugzilla.redhat.com/ 
bugzilla/show_bug.cgi?id=186277

-Jeff