<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">Patch-ID# 102980-17
Keywords: security sendmail.cf aliases dns BIND 4.9.3 libresolv.so.2 V0-V5 V8
Synopsis: SunOS 5.5: /usr/lib/sendmail fixes
Date: Mar/11/98

Solaris Release: 2.5

SunOS release: 5.5

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 102981

Topic: SunOS 5.5: /usr/lib/sendmail fixes

BugId's fixed with this patch: 1210872 1232712 1237695 1239516 1241168 1241841 1242930 12440271245185 1246623 1247867 1249090 1249900 1252530 1252675 1253584 1258420 1261561 1265017 1265313 1267313 4011634 4015151 4017798 4018487 4018511 4022409 4027534 4030794 4034927 4035001 4037078 4044496 4069756 4087808 

Changes incorporated in this version: 4087808

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch: 

Patches required with this patch: 103667-01 (or higher revs)

Obsoleted by: 

Files included with this patch:

/etc/mail/main.cf
/etc/mail/sendmail.cf
/etc/mail/subsidiary.cf
/usr/lib/mail.local
/usr/lib/sendmail

Problem Description:

4087808 security vulnerability in /usr/lib/mail.local

(from 102980-16)

1247867 mail.local strips long from address
1246623 mail.local porting introduced security problem

(from 102980-15)

4069756 "cannot bind to NIS domain" should not be a fatal error

(from 102980-14)

4044496 patch 102980-10 prepatch script is not jumpstart aware 
4034927 sendmail in bs mode doesn't work with -or option
4035001 sendmail can't create file
4037078 sendmail sends email to the mailhost instead of sending it directly
4022409 sendmail dumps core after rewriting the ruleset 0
4027534 V0-V5 options cause sendmail alias rebuild to fail.
1265313 sendmail v8 dumps core with alias include file owned by unknown user
1261561 getmxrr: res_search (eng) failed with impossible h_errno (-1)
4015151 sendmail fails to use scanf for 'F' command in sendmail.cf
1241168 Race condition exists
1252675 sendmail will match on comments in the hosts file
1242930 sendmail displays multiple dbm put error messages
1258420 sendmail does not quote nis+ special characters in mail alias expansion
1249090 sendmail V8 coredumps while delivering from mail queue to HP openmail

(from 102980-13)

4017798 Sendmail in bs mode ignores the Orident option
4018511 Security bug: Sendmail Group Permissions Vulnerability
4030794 sendmail gets From: field wrong

(from 102980-12)

4018487 Security Bug: Sendmail Treats The w Option As Safe
4018511 Security bug: Sendmail Group Permissions Vulnerability

(from 102980-11)

4011634 a user can redirect messages to unqualified domain names
1267313 sendmail security bug - Sendmail CERT advisory 96.20

(from 102980-10)

1265017 V8 sendmail patch breaks F=U (UNIX-Style From line) flag
1245185 alias indirect self reference is broken in sendmail v8

(from 102980-09)

1252530 bad patch 101739-11 102066-09 102980-04 causes make aliases to fail

(from 102980-08)

1249900 Transient parse error when using NIS+ prevents sendmail outside the domain

(from 102980-07)

1253584 Sendmail source update and rebuild for BIND 4.9.3

(from 102980-06)

1249090 sendmail V8 coredumps while delivering from mail queue to HP openmail

(from 102980-05)

1241841 Sendmail V8 coredumps when using HP openmail, or Novell Groupwise SMTP Gateway

(from 102980-04)

1244027 NIS mail.aliases DBM map built from v8 sendmail breaks v5 sendmail clients

(from 102980-03)

1239516 sendmail should check gethostbyaddr return values

(from 102980-02)

1237695 with V8 sendmail mail to numeric login IDs returns user unknown
1232712 sendmail in Sol 2.5 doesn't works with dns

(from 102980-01)

1210872 sending mail to non-UNIX machines is broken

Patch Installation Instructions: 
-------------------------------- 
Refer to the Install.info file within the patch for instructions on
using the generic 'installpatch' and 'backoutpatch' scripts provided
with each patch.  Any other special or non-generic installation
instructions should be described below.

Special Install Instructions: 
-----------------------------

This patch requires the sparc libresolv.so.2/BIND 4.9.3 patch, 103667-01,
or newer revision to be installed on the target system.
 
It is also recommended to install the following patches or newer revs:
 
        103279-02 or newer       nscd/nscd_nischeck rebuild for BIND 4.9.3
       *103703-01 or newer       nss_dns.so.1 rebuild for BIND 4.9.3
        103708-01 or newer       rpc.nisd_resolv rebuild for BIND 4.9.3

Patch 103703-01 does not need to be installed f the target system has
  103667-03 or newer.

Before installing this patch if you've customized any of the following
files copy them aside as they will be overwritten by the patch.  

	/etc/mail/main.cf
 	/etc/mail/sendmail.cf
	/etc/mail/subsidiary.cf

Rebuild the mail.aliases map on the NIS master. 
	# /usr/lib/sendmail -bi -oA/var/yp/&lt;domain&gt;/mail.aliases
</pre></body></html>