-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2006-28
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 22 Sep 2006
 Last revised: 22 Sep 2006

 Package: sendmail

 Summary: sendmail denial of service attack

 More information:
    Sendmail is a Mail Transport Agent, which is the program that moves mail
    from one machine to another.

    Sendmail may allow remote attackers to cause a denial of service via very long header.

 Impact:
    The sendmail allows remote attackers to cause a denial of service.

 Affected Products:
    - Turbolinux Appliance Server 2.0
    - Turbolinux 10 Server x64 Edition
    - Turbolinux Appliance Server 1.0 Hosting Edition
    - Turbolinux Appliance Server 1.0 Workgroup Edition
    - Turbolinux 10 Server
    - Turbolinux Personal
    - Turbolinux 8 Server
    - Turbolinux 7 Server


 <Turbolinux Appliance Server 2.0>

   Source Packages
   Size: MD5

   sendmail-8.13.1-9.src.rpm
      2005027 f787def3b7794d5b4fd244b5836c6222

   Binary Packages
   Size: MD5

   sendmail-8.13.1-9.i586.rpm
       453977 a0860af5f5a93091499e8a9114839b2c
   sendmail-cf-8.13.1-9.i586.rpm
       157430 833e37872b2300dd4def58c4cc4a452c

 <Turbolinux 10 Server x64 Edition> 

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/SRPMS/sendmail-8.13.1-9.src.rpm
      2005027 8f6409948a3f3e5f950b5a3c6cc33d3d

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/misc/RPMS/sendmail-8.13.1-9.x86_64.rpm
       532872 8a1ed38b622d7f3b0079535610783f5a
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/misc/RPMS/sendmail-cf-8.13.1-9.x86_64.rpm
       157297 352b478d94576ecac41d3e42bba498e2
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/misc/RPMS/sendmail-devel-8.13.1-9.x86_64.rpm
       134434 1efca078684508b004f84d58ec6a5267
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/misc/RPMS/sendmail-doc-8.13.1-9.x86_64.rpm
       450661 afba4d63a521d3f5c8a3ed82f6ef2c17
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/updates/misc/RPMS/sendmail-vacation-8.13.1-9.x86_64.rpm
        58324 8bba407408d3577381707edcdc151c36

 <Turbolinux Appliance Server 1.0 Hosting Edition>

   Source Packages
   Size: MD5

   sendmail-8.12.10-9.src.rpm
      1933418 3de936a13240938f312731df5aadf249

   Binary Packages
   Size: MD5

   sendmail-8.12.10-9.i586.rpm
       436143 b869b2bafe9c7eff3ec3934ae975ac19
   sendmail-cf-8.12.10-9.i586.rpm
       146433 b33ed115b51924c9709a20fb7fd5371d
   sendmail-doc-8.12.10-9.i586.rpm
       429299 16013ac0843ae7a3545581b5f1892b77

 <Turbolinux Appliance Server 1.0 Workgroup Edition>

   Source Packages
   Size: MD5

   sendmail-8.12.10-9.src.rpm
      1933418 2b2ca7a7259593daa2f016045fed65cc

   Binary Packages
   Size: MD5

   sendmail-8.12.10-9.i586.rpm
       436275 def50701c5cb82cdcc8be853581ed244
   sendmail-cf-8.12.10-9.i586.rpm
       147270 ff80f9b7cb70e381f09862ddaa2937f9
   sendmail-doc-8.12.10-9.i586.rpm
       429286 b9a27be49a183f1ee75b4b012d233500

 <Turbolinux 10 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/SRPMS/sendmail-8.13.1-9.src.rpm
      2005027 f787def3b7794d5b4fd244b5836c6222

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/misc/RPMS/sendmail-8.13.1-9.i586.rpm
       453977 a0860af5f5a93091499e8a9114839b2c
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/misc/RPMS/sendmail-cf-8.13.1-9.i586.rpm
       157430 833e37872b2300dd4def58c4cc4a452c
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/misc/RPMS/sendmail-devel-8.13.1-9.i586.rpm
       125383 d6f0acbade8d4dbe5ecebdb4e213d96c
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/misc/RPMS/sendmail-doc-8.13.1-9.i586.rpm
       450688 8344c4dd1ebaecb4cb7f5f011ea51576
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/misc/RPMS/sendmail-vacation-8.13.1-9.i586.rpm
        50269 6f5ea7f37f8a64146c35922079e3c4f5

 <Turbolinux 8 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/sendmail-8.12.10-9.src.rpm
      1933418 72e495dc98aa628e4088ddbf26559fa6

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/sendmail-8.12.10-9.i586.rpm
       436249 f86489c7d08c1d3f03400daf4b429a13
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/sendmail-cf-8.12.10-9.i586.rpm
       146607 b6cc5842e00c9e8b9a5ebc35c282d9e2
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/sendmail-doc-8.12.10-9.i586.rpm
       429472 2ad75db50eb72e3c5d4f6870a52491df

 <Turbolinux 7 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/SRPMS/sendmail-8.13.6-5.src.rpm
      2027137 82a2eca9faef6983752803b203989f0c

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/sendmail-8.13.6-5.i586.rpm
       407141 1417ed7b7e08d8f41426880f6d832a2b
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/sendmail-cf-8.13.6-5.i586.rpm
       151501 065ea9f464eed900eadea1a08af9cad8
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/sendmail-doc-8.13.6-5.i586.rpm
       419013 ce829ab0dfbd19bcaa1c10be3c049b18


 CVE
   [CVE-2006-4434]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4434

 --------------------------------------------------------------------------
 Revision History
    22 Sep 2006 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2006 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFFE3IPK0LzjOqIJMwRAhEnAJ4w71wheWFypARJgvKGOv3EnlYWCgCfdFOs
sl6NENziqmYuR5byc5e91CY=
=hYy3
-----END PGP SIGNATURE-----