Patch-ID# 102066-08 Keywords: aliases user cachefs sendmail security dns numeric login Synopsis: SunOS 5.4: sendmail patch Date: Apr/09/96 Solaris Release: 2.4 SunOS Release: 5.4 Unbundled Product: Unbundled Release: Xref: This patch available for x86 as patch 102064 Topic: SunOS 5.4: sendmail patch NOTE: Refer to the file called SPECIAL_NOTE_SENDMAIL shipped with this patch for special instructions. BugId's fixed with this patch: 1031899 1097962 1138851 1138867 1139292 1141553 1153954 1163133 1167823 1171241 1175514 1176905 1181365 1184012 1189574 1191075 1192880 1193564 1194262 1194643 1196392 1196394 1196727 1197254 1197255 1206222 1206233 1213618 1214897 1215086 1217009 1219169 1222105 1222168 1222457 1232712 1237695 1239516 Changes incorporated in this version: 1239516 Relevant Architectures: sparc Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: 102319-01 Patches required with this patch: Obsoleted by: Files included with this patch: /etc/mail/main.cf /etc/mail/sendmail.cf /etc/mail/subsidiary.cf /usr/bin/aliasadm /usr/bin/mailcompat /usr/bin/mailstats /usr/bin/vacation /usr/lib/sendmail /usr/lib/sendmail.mx Problem Description: 1239516 sendmail should check gethostbyaddr return values (from 102066-07) 1237695 with V8 sendmail mail to numeric login IDs returns user unknown 1232712 sendmail in Sol 2.5 doesn't works with dns (from 102066-06) 1181365 sendmail crash segv segment violation core dump on mixed case mx records 1189574 sendmail "M" option has potential security hole 1097962 aliasadm -e fails & gives memory fault when used with a large nis+ alias table. 1171241 Sendmail cannot handle quoted characters in full name 1031899 8 bit chars are not recognized when used with '|' aliases 1138851 get returned mail if use chinese characters in an alias 1163133 $%x in sendmail.cf actually does nothing - please fix or remove from sendmail.c 1138867 mail load balancing and auto failed over 1139292 If a local alias is present and "findable", sendmail still insists on using NIS 1175514 nsswitch aliases causes problem for sendmail 1141553 Non-standard NIS+ tables don't work in sendmail rule matching 1176905 In Solaris 2.3, "%l" doesn't correctly arrange for a fully qualified local name 1184012 aliasadm -e coredumps 1194643 sendmail issues bogus warning security warning when newline in header field see 1191075 sendmail security bug 1193564 trashed buf in sendmail caused mail bouncing problem 1192880 IDENT protocol should be turned of in v1/sun mode for compatibility 1167823 Sendmail incorrectly reporting mail spool on cachefs 1194262 sendmail reverse alias is breaking 1196727 Remote mode doesn't route on NFS mounted spool directory. 1197255 495 sendmail version was not set correctly 1197254 default domain is not handle correctly in 495 sendmail 1206222 nisplus_getcanonname() should remove the reference to $P in 495 v8 sendmail 1206233 495 sendmail's short address conversion routine could misidentified the domain 1213618 MaxHopCount in 495 sendmail diffs from the max hop count in old V5 sendmail 1215086 UUCP address format system error msg printed while running V8, but not in V5 1214897 X86: build27 sendmail causes gethostbyaddr() error 1219169 NIS+ only reverse aliasing does not work with sendmail V8 1222105 mconnect prints wrong port on little-endian machines 1222457 sendmail coredumps when .forwarded to file on PowerPC 1217009 pkgadd hangs on sendmail -oi on nis+ server with sendmail POINT PATCH installed 1222168 sendmail -bs -or10s returns 0 (successful termination) when timeout occurs 1196394 incompatibility in openxscript() between the file open and stdio mode 1196392 Password entries without any shell listed (a NULL shell) wouldn't be ok in v8 (from 102066-04) 1191075 sendmail security bug (from 102066-03) 1189574 sendmail "M" option has potential security hole (from 102066-02) 1167823 Sendmail incorrectly reporting mail spool on cachefs (from 102066-01) 1153954 Unknown user in aliases kills an entire list Unknown user in aliases database prevents sendmail from delivering mail to other user on the same alias. Patch Installation Instructions: -------------------------------- Refer to the Install.info file within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below. Special Install Instructions: ----------------------------- Refer to the file called SPECIAL_NOTE_SENDMAIL shipped with this patch for special instructions.