Patches available for sendmail

[Berlene Herren]

=================================================================
A security bulletin has been issued:

-----------------------------------------------------------------
**REVISED 04**
Source: HEWLETT-PACKARD COMPANY
SECURITY BULLETIN: HPSBUX0304-253
Originally issued: 03 April 2003
Last revised: 08 May 2003
SSRT3531 Potential Security Vulnerability in sendmail (rev.4)

-----------------------------------------------------------------

To access the bulletin from the itrc:

Select "maintenance and support"
Select "search technical knowledge base"
Select "HP-UX Software Security Bulletins"
Select "Search by Security Bulletin Number"
Enter "HPSBUX0304-253"
Search

The complete list of security bulletins can be found here:

http://itrc.hp.com/cki/bin/doc.pl/screen=ckiSecurityBulletin
=================================================================

Berlene

[John Payne_2]

Berlene,

Why are they calling it an 'early release' patch? I guess what I am asking really is what is an 'early release' patch?

Thanks
John

[Berlene Herren]

Early release GR patches. Meaning there not on the HP Catalog yet.

Berlene

[Mark Greene_1]

John,

Unlike the regular patches, these fixes come in a prepackaged depot. This also has the side affect of not having a patch number designation.

They look like this in swlist:

HPSecurityBul246 B.10.00 Temporary Packaging for HP Security Bulletin 246 sendmail(1M) fix
HPSecurityBul253 B.2003.04.04.01 Temporary Packaging for HP Security Bulletin 253 sendmail(1M) fix


HTH
mark