-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2006-5
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 28 Mar 2006
 Last revised: 28 Mar 2006

 Package: sendmail

 Summary: Race condition

 More information:
    Sendmail is a Mail Transport Agent, which is the program that moves mail
    from one machine to another.
    The vulnerabilities have been discovered in the signal handler race condition of sendmail.

 Impact:
    These vulnerabilities may allow remote attackers to execute arbitrary code.

 Affected Products:
    - Turbolinux Appliance Server 2.0
    - Turbolinux Appliance Server 1.0 Hosting Edition
    - Turbolinux Appliance Server 1.0 Workgroup Edition
    - Turbolinux 8 Server
    - Turbolinux 8 Workstation
    - Turbolinux 7 Server


 <Turbolinux Appliance Server 2.0>

   Source Packages
   Size: MD5

   sendmail-8.13.1-6.src.rpm
      2003593 8b28008b87e4ed3608c2180fd1b43f44

   Binary Packages
   Size: MD5

   sendmail-8.13.1-6.i586.rpm
       453471 d685149032dbc6eccc44736a8bbc2a22
   sendmail-cf-8.13.1-6.i586.rpm
       157103 9f87e2b9fb70b3d2d50fd792e65fca20

 <Turbolinux Appliance Server 1.0 Hosting Edition>

   Source Packages
   Size: MD5

   sendmail-8.12.10-6.src.rpm
      1931778 4b66b74db7b1b8bd9392e82b92e49936

   Binary Packages
   Size: MD5

   sendmail-8.12.10-6.i586.rpm
       435358 2d3fec7d396540305bebf6a30c0a9cb3
   sendmail-cf-8.12.10-6.i586.rpm
       146126 4d61805e43826015361b32f091d16b46
   sendmail-doc-8.12.10-6.i586.rpm
       428906 29916375cc6a0af07272d82f5c12d816

 <Turbolinux Appliance Server 1.0 Workgroup Edition>

   Source Packages
   Size: MD5

   sendmail-8.12.10-6.src.rpm
      1931778 ab09cc937e0dab1b419018884c8b6ec2

   Binary Packages
   Size: MD5

   sendmail-8.12.10-6.i586.rpm
       435984 a02041586d208bc3125a3fd1c13a3e36
   sendmail-cf-8.12.10-6.i586.rpm
       146651 7385cb9355ec91d1bbe4777b600fb760
   sendmail-doc-8.12.10-6.i586.rpm
       429047 5eef648b5860ae6f81b643a8d2d3d481

 <Turbolinux 8 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/sendmail-8.12.10-6.src.rpm
      1931778 49f66dcf77d0fc9062bd3bf666c7ba2b

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/sendmail-8.12.10-6.i586.rpm
       435907 9c8faea10b2ca899b9aed18672e8375e
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/sendmail-cf-8.12.10-6.i586.rpm
       146498 74b764b0a88e80997afd4fa387df3bcd
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/sendmail-doc-8.12.10-6.i586.rpm
       429099 26e19e99e96518c92e16f08dcb30e886

 <Turbolinux 8 Workstation>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/SRPMS/sendmail-8.13.6-3.src.rpm
      2025115 5f178674180f83ef6871ea12f80e4e9b

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/sendmail-8.13.6-3.i586.rpm
       410702 95dcf5c2cec2da7da7f18e9fdad4bf58
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/sendmail-cf-8.13.6-3.i586.rpm
       151096 9e0b5a65cba808bde9879e93c0676a07
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/sendmail-doc-8.13.6-3.i586.rpm
       418841 fe6a26f121fe486191e0e79d5a136a2f

 <Turbolinux 7 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/SRPMS/sendmail-8.13.6-3.src.rpm
      2025115 d4a93166fa413f0224979fe6532c50de

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/sendmail-8.13.6-3.i586.rpm
       406599 d0b768fdf7907d6d7f40ac38033fa36f
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/sendmail-cf-8.13.6-3.i586.rpm
       151280 e20c4bdfc0cbc65496d03c14c12a42aa
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/sendmail-doc-8.13.6-3.i586.rpm
       418874 26ec699b8a28186755081373c410853c


 References:

 CVE
   [CAN-2006-0058]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-0058

 --------------------------------------------------------------------------
 Revision History
    28 Mar 2006 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2006 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFEKR8LK0LzjOqIJMwRAnfjAJ92EFUCNKRDkOnR7nWRnV4Aj2lmkQCfVjeZ
Imj6ZTjUJXoZSW2yMDt3+RQ=
=R78g
-----END PGP SIGNATURE-----