topic Re: Latest Sendmail? in Operating System - HP-UX

Latest Sendmail?

Robert True — Thu, 03 Apr 2003 14:34:56 GMT

What is the latest HP version of Sendmail for 11.0 and where can I pickup the depot pkg?

Re: Latest Sendmail?

Pete Randall — Thu, 03 Apr 2003 14:42:10 GMT

Hi Robert,

I think this is what you're looking for:

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=SMAIL811

Pete

Re: Latest Sendmail?

Uday_S_Ankolekar — Thu, 03 Apr 2003 14:52:45 GMT

Sendmail 8.11.1 is the latest

Download for free from here!.

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=SMAIL811

-USA..

Re: Latest Sendmail?

Steven E. Protter — Thu, 03 Apr 2003 16:06:35 GMT

There is a binary upgrade you need to do after you do the depot installation. Just a replacement of the sendmail executable due to a security flaw.

Read this thread to find out how.

http://forums.itrc.hp.com/cm/QuestionAnswer/0,,0x82599c196a4bd71190080090279cd0f9,00.html

SEP

Re: Latest Sendmail?

Pete Randall — Thu, 03 Apr 2003 16:25:43 GMT

I would certainly hope that HP has incorporated that fix into their sendmail distribution by now! Comments? Berlene - are you out there?

Pete

Re: Latest Sendmail?

Robert True — Thu, 03 Apr 2003 16:40:03 GMT

Thanks everyone, the info linked to was confusing but I was able to determine (I think) I have the lastest version and FIX after downloading the 8.11.1 special release from the software depot.

Re: Latest Sendmail?

Steven E. Protter — Thu, 03 Apr 2003 17:29:59 GMT

I think I'm going to email Carly's office?

They need to get ahead of this sendmail thing. Can anyone suggest a more appropriate person to contact directly?

SEP

Re: Latest Sendmail?

Berlene Herren — Thu, 03 Apr 2003 18:36:55 GMT

Steven, I have passed your frustration on and someone from HP will be calling you. Probably not Carly :-)

Berlene

Re: Latest Sendmail?

Berlene Herren — Thu, 03 Apr 2003 18:41:20 GMT

See this posting concerning sendmail fixes...

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xe049b82b2d63d71190080090279cd0f9,00.html

berlene

Re: Latest Sendmail?

Steven E. Protter — Thu, 03 Apr 2003 19:38:55 GMT

Thanks Berlene,

As you know, my frustration is because I'm getting hounded on security issues and you and I proved that any user in my building can run the exploit.

I was stupid, I told my management about it.

SEP

Re: Latest Sendmail?

Scott Donaldson — Fri, 04 Apr 2003 16:12:56 GMT

Hi,

I have just installed the sendmail.811.11.11.r2 binary on my 11.00 box and it does not run. When I attempt to test it with the following command:

# sendmail -bt -d0.1
This happens:

/usr/lib/dld.sl: Unresolved symbol: in6addr_any (data) from sendmail
Abort(coredump)

I can only guess that maybe it was built with IPv6 support/libraries....that I don't have.

Can we get a IPv4 only version (if my guess is correct) ?

Scott Donaldson

Re: Latest Sendmail?

Berlene Herren — Fri, 04 Apr 2003 16:55:51 GMT

Investigating Scott...I will find the problem and post it.

Berlene

Re: Latest Sendmail?

Berlene Herren — Fri, 04 Apr 2003 17:10:55 GMT

I did the same thing, Scott.

# what /usr/sbin/sendmail
/usr/sbin/sendmail:
Copyright (c) 1998 HEWLETT PACKARD COMPANY and its licensors,
including Sendmail, Inc., and the Regents of the
University of California. All rights reserved.
version.c 8.11.1 (Berkeley) - Revision 1.3_binary - 03/04/2003
#

this is what you are supposed to see. You need to apply sendmail.811.11.00.r1.gz for 8.11.1 on 11.0.

Confusing enough? :-)

Berlene

Re: Latest Sendmail?

Scott Donaldson — Fri, 04 Apr 2003 18:03:11 GMT

Berlene,

Thanks for taking the time.

>> Stupid Admin trick <<

Yes I did try to install the 11.11 version on 11.00 .

I made the assumption that the .r1 releases were for the Previous issue and that the .r2 releases were required for the most recent sendmail issue.

Luckily I did download the correct version and it does work.

# what /usr/sbin/sendmail
/usr/sbin/sendmail:
Copyright (c) 1998 HEWLETT PACKARD COMPANY and its licensors,
including Sendmail, Inc., and the Regents of the
University of California. All rights reserved.
version.c 8.11.1 (Berkeley) - Revision 1.3_binary - 03/04/2003

Since it is dated 03/04/2003 does it have a fix in it for the most recent sendmail issue?

Re: Latest Sendmail?

Berlene Herren — Fri, 04 Apr 2003 18:15:11 GMT

Not a problem Scott, I think the font is too small in those bulletins, too :-)

Yes, this incorporates both fixes.

Berlene

Re: Latest Sendmail?

juno2 — Tue, 13 May 2003 08:34:07 GMT

Hi Scott Donaldson,

where can u get the depot "sendmail.811.11.00.r1.gz" ? can youu let me have the link? thx

Re: Latest Sendmail?

Berlene Herren — Tue, 13 May 2003 11:05:45 GMT

Juno2, check this thread:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x242963f96280d711abdc0090277a778c,00.html

You can get the .r1 binary OR load the latest patches for 11.0 and 11i. Patch for 10.20 will be released later.

Berlene