Sync sendmail 8.14.4-2 (main) from Debian unstable (main)

Bug #673814 reported by Angel Abad
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
sendmail (Ubuntu)
Fix Released
Wishlist
Unassigned

Bug Description

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 affects ubuntu/sendmail
 status new
 importance wishlist
 subscribe ubuntu-sponsors
 done

Please sync sendmail 8.14.4-2 (main) from Debian unstable (main)

Explanation of the Ubuntu delta and why it can be dropped:

The unique diff with Debian package is the use of DEB_BUILD_HARDENING=1
in debian/rules

The original maintainer sais that this isnt necessary because the
package is already hardened with debian/rules options. You can
see at BTS bug:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542739

I think the best option is to sync this package.

Thanks!

Changelog entries since current natty version 8.14.3-9.4ubuntu1:

sendmail (8.14.4-2) unstable; urgency=high

  * Actually get the DHCP config files installed :( Closes: #602252

 -- Richard A Nelson (Rick) <email address hidden> Wed, 03 Nov 2010 22:05:00 -0000

sendmail (8.14.4-1) unstable; urgency=high

  * Long past due

  * Re-enable libdb-dev, db4.8 working again

  * New upstream
    + Null checking in certificate CN (CVE-2009-4565)
    + Queue identifier int overflow
    + Handle malformed DNS replies
    + milter segfault/Dos fixes

  * Acknowledge NMUs - thanks !
    + rmail conflicts with masqmail
    + move dhcp hooks from /etc/dhcp3 to /etc/dhcp
    + CVE-2009-4565

  * Correct issues with NMUs
    + Differing buildinfo.gz (all the same file) Closes: #597779

  * Outstanding bugs:
    + Milter segfaults/Remote DoS? Closes: #527862
    + invoke.rc conditional Closes: #553135
    + We already harden Closes: #542739
    + Queue aging Closes: #583108
    + mail.local use of lockf Closes: #513298
    + init.d use of ps Closes: #510679
    + remove access on purge Closes: #589810

 -- Richard A Nelson (Rick) <email address hidden> Mon, 11 Sep 2010 17:53:00 -0000

sendmail (8.14.4-0) private; urgency=low

  * Start of another round of lintian cleanups
    + remove /var/run files from package (they're created as needed)
  * Drop back to db4.7 - 4.8 is broken

  * New upstream
    + Null checking in certificate CN
    + Queue identifier int overflow
    + Handle malformed DNS replices
    + DSA/DH parm length increase (Debian did that long ago)

 -- Richard A Nelson (Rick) <email address hidden> Thu, 31 Dec 2009 00:20:00 -0000

sendmail (8.14.3-10) unstable; urgency=low

  * Support parms on runq (Now, Verbose, or any valid sendmail option: -v)
  * Remove old & uneeded patch ldap_url_search
  * remove obsolete crap from /usr/share/bug/sendmail/script Closes: #530992

 -- Richard A Nelson (Rick) <email address hidden> Mon, 09 Mar 2009 18:25:00 -0000

sendmail (8.14.3.Gamma0-0) private; urgency=low

  * New upstream Gamma
  * refit patches

 -- Richard A Nelson (Rick) <email address hidden> Thu, 17 Apr 2008 05:18:00 -0000

sendmail (8.14.3.Beta1-0) private; urgency=low

  * New upstream Beta
  * refit patches

 -- Richard A Nelson (Rick) <email address hidden> Sun, 06 Apr 2008 16:57:00 -0000

sendmail (8.14.3.Beta0-0) private; urgency=low

  * New upstream Beta
  * refit patches

 -- Richard A Nelson (Rick) <email address hidden> Wed, 05 Mar 2008 05:39:00 -0000

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkzbNgYACgkQCY2uR+47wnn49wCcC18GhMYoeXBhqkw0gY4jneHZ
K3YAn1tv/9wjKr/2x0+b+NGsXmVGgAwe
=PeJB
-----END PGP SIGNATURE-----

CVE References

Benjamin Drung (bdrung)
Changed in sendmail (Ubuntu):
assignee: nobody → Benjamin Drung (bdrung)
status: New → In Progress
Revision history for this message
Benjamin Drung (bdrung) wrote : ack-sync

sendmail 8.14.4-2 builds. Sync request ACK'd.

Changed in sendmail (Ubuntu):
assignee: Benjamin Drung (bdrung) → nobody
status: In Progress → Confirmed
Revision history for this message
Colin Watson (cjwatson) wrote :

2010-11-11 12:55:25 INFO - <sendmail_8.14.4-2.dsc: downloading from http://ftp.debian.org/debian/>
[Updating] sendmail (8.14.3-9.4ubuntu1 [Ubuntu] < 8.14.4-2 [Debian])
 * Trying to add sendmail...
2010-11-11 12:55:26 INFO - <sendmail_8.14.4-2.diff.gz: downloading from http://ftp.debian.org/debian/>
2010-11-11 12:55:26 INFO - <sendmail_8.14.4.orig.tar.gz: downloading from http://ftp.debian.org/debian/>
I: sendmail [main] -> sendmail-bin_8.14.3-9.4ubuntu1 [universe].
I: sendmail [main] -> rmail_8.14.3-9.4ubuntu1 [universe].
I: sendmail [main] -> sensible-mda_8.14.3-9.4ubuntu1 [universe].
I: sendmail [main] -> libmilter1.0.1_8.14.3-9.4ubuntu1 [main].
I: sendmail [main] -> libmilter1.0.1-dbg_8.14.3-9.4ubuntu1 [main].
I: sendmail [main] -> libmilter-dev_8.14.3-9.4ubuntu1 [main].
I: sendmail [main] -> sendmail-doc_8.14.3-9.4ubuntu1 [universe].
I: sendmail [main] -> sendmail_8.14.3-9.4ubuntu1 [universe].
I: sendmail [main] -> sendmail-base_8.14.3-9.4ubuntu1 [universe].
I: sendmail [main] -> sendmail-cf_8.14.3-9.4ubuntu1 [universe].

Changed in sendmail (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.