Sendmail Vulnerability: critical

[Randal, Phil]

The fedoralegacy.org updates-testing yum repository has them.

There are also a bunch of 8.13.6 RPMs for RH9, FC 1,2,3,4,5, RHEL 3,4
over at

  http://www.city-fan.org/ftp/contrib/mail/

Cheers,

Phil

----
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK  

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Dave
> Sent: 23 March 2006 11:49
> To: MailScanner discussion
> Subject: Re: Sendmail Vulnerability: critical
> 
> Hello,
>     I'm checking the fedoralegacy site for sendmail rpms i 
> can get via yum 
> and am not seeing them. Does anyone know of a yum repository 
> that has rh9, 
> to fc3 updated sendmail rpms?
> Thanks.
> Dave.
> 
> ----- Original Message ----- 
> From: "Martin Hepworth" <martinh at solid-state-logic.com>
> To: "'MailScanner discussion'" <mailscanner at lists.mailscanner.info>
> Sent: Thursday, March 23, 2006 5:49 AM
> Subject: RE: Sendmail Vulnerability: critical
> 
> 
> > Aha
> >
> > I wondered what had happened to the Univ of Kent mirror 
> site after they 
> > lost
> > the JISC funding.....much better than the 'new' mirror.ac.uk...
> >
> >
> > Ta
> >
> > --
> > Martin Hepworth
> > Snr Systems Administrator
> > Solid State Logic
> > Tel: +44 (0)1865 842300
> >
> >> -----Original Message-----
> >> From: mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-
> >> bounces at lists.mailscanner.info] On Behalf Of Will McDonald
> >> Sent: 23 March 2006 10:38
> >> To: MailScanner discussion
> >> Subject: Re: Sendmail Vulnerability: critical
> >>
> >> On 22/03/06, Stephen Swaney <steve.swaney at fsl.com> wrote:
> >> > Ugo,
> >> >
> >> >  Right now we can only update red hat systems that are 
> registered to 
> >> > run
> >> > up2date.
> >> >
> >> > I'll leep and eye out for the CentOS patches and I'll build a new
> >> > sendmail-8.13.6 rpms for The 3.0 systems we've updated 
> to sendmail-
> >> 8.13.x.
> >>
> >> CentOS users, check which mirror your using/syncing from. 
> We've been
> >> using Sunsite UK, checking for updates today I noticed 
> they're still
> >> on CentOS4.2 and don't have the Sendmail updates. Mirrorservice.org
> >> had CentOS 4.3 and the latest updates.
> >>
> >> Will.
> >> --
> >> MailScanner mailing list
> >> mailscanner at lists.mailscanner.info
> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>
> >> Before posting, read http://wiki.mailscanner.info/posting
> >>
> >> Support MailScanner development - buy the book off the website!
> >
> >
> > 
> **********************************************************************
> >
> > This email and any files transmitted with it are confidential and
> > intended solely for the use of the individual or entity to whom they
> > are addressed. If you have received this email in error 
> please notify
> > the system manager.
> >
> > This footnote confirms that this email message has been swept
> > for the presence of computer viruses and is believed to be clean.
> >
> > 
> **********************************************************************
> >
> > -- 
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website! 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 
>