Bug 42664

Summary:	Race condition in older versions of sendmail is fixed in version 8.11.4
Product:	[Retired] Red Hat Linux	Reporter:	Peter Ajamian <peter>
Component:	sendmail	Assignee:	Florian La Roche <laroche>
Status:	CLOSED CURRENTRELEASE	QA Contact:	David Lawrence <dkl>
Severity:	high	Docs Contact:
Priority:	medium
Version:	6.2	CC:	bishop
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
URL:	http://www.securityfocus.com/archive/1/187127
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2001-05-29 09:15:29 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Peter Ajamian 2001-05-29 09:15:25 UTC

From Bugzilla Helper:
User-Agent: Mozilla/4.73 [en] (Win95; U)

Description of problem:
Sendmail versions prior to 8.11.4 have a documented race condition having to do with signal handling which can lead to heap corruption and a 
possible local root exploit (none are currently known).

How reproducible:
Didn't try

Steps to Reproduce:


Additional info:

Although difficult to expliot, this is a potentially serious bug which IMHO warrants an errata with packages for all currently supported versions to 
upgrade to 8.11.4.

References:
http://www.securityfocus.com/archive/1/187126
http://www.securityfocus.com/archive/1/187127