Errata for MirOS #8semel
Updates for the errata below can be found in the directory /MirOS/v8.1/updates/ on your favourite mirror.
These updates are in chronological order. They may depend on one another, so you should install them in the order presented. They are signed with PGP, please check the signature before installing them.
- An updated MirPorts Framework installation set (snapshot) is available as ports8.ngz (usually taken from the last snapshot of MirOS-current).
- The Last Minute updates section of the release announcement is also worth a read.
This update fixes the recent sendmail security problems (CVE-2006-0058). Sendmail versions older than 8.13.6 are vulnerable to a timing attack that allows the execution of arbitrary code.
The update contains an updated version of sendmail. After installing, you should recreate the databases by issuing the command:
cd /usr/share/sendmail/cf && sudo make regen-databases
You can also install the updated configuration files in /etc. To do this, copy /usr/share/sendmail/cf/openbsd-proto.mc to /etc/mail/sendmail.cf, /usr/share/sendmail/cf/openbsd-localhost.mc to /etc/mail/localhost.cf, and /usr/share/sendmail/cf/submit.mc to /etc/mail/submit.cf.