05.08.2003

With the fastest turn around time ever Sun Cobalt released a new security patch which fixes the second Sendmail vulnerability which was discovered twelve days ago.

Patch 16429 just made it to the FTP server and BlueLinQ last night and is now available for a couple of Sun Cobalt server appliances. Patches for all Cobalt server appliances should be available through SunSolve within the next couple of days.

Please note:

If you have our 2nd unofficial Sendmail patch installed, then you do not need patch 16429.

If you have our AV-Suite installed and install patch 16402 and/or 16429, then the AV-Suite will break.

Solution (for AV-Suite users only!):
/etc/rc.d/init.d/sendmail stop
rm -Rf /home/spool/mqueue/q1
rm -Rf /home/spool/mqueue/q2
rm -Rf /home/spool/mqueue/q3
rm -Rf /home/spool/mqueue/q4
/etc/rc.d/init.d/sendmail start

That will fix the problem which both 16402 and/or 16429 create in regards to the AV-Suite.