Upgrading Sendmail

[Kyle D. Harris]

There are vulnerabilities in Sendmail, thus i'm upgrading to 8.12.10 ...I put the tar.gz file in /etc and then 'gzip -dc sendmailfile..."

I'm not sure exactly where the old sendmail is located by default on the system. I believe I still have RH 6.2 on this system. I'm seeing alot of sendmail files in /etc but not really any version numbers.

I guess my question is, by getting this file and gzip'ing it, will the system recognize the upgrade and use this version when i restart the services? Thanks for any help in getting me on the right track! Appreciate it.

Kyle

[Kyle D. Harris]

***I just read this from a past post, Is this accurate as to what i need to do additionally to upgrade ? ****


Hi Mark,

The version of sendmail on your box should be updated to avoid the recent vulnerability (posts here on the forum about this). Here's what you should do now until you get the 8.12.8 version compiled and in place...


ftp hprc.external.hp.com
user= sendmail
pass= sendmail

ftp> bin
ftp> get sendmail.893.1100.gz
ftp> bye

# gunzip sendmail.893.1100.gz
# /sbin/init.d/sendmail stop
# mv /usr/sbin/sendmail /tmp/sendmail.bad
# mv sendmail.893.1100 /usr/sbin/sendmail
# chmod 7555 /usr/sbin/sendmail
# chown root:mail /usr/sbin/sendmail
# /sbin/init.d/sendmail start

To verify you have the fix...
# what /usr/sbin/sendmail
--> look for (PHNE_24419+JAGae58098)

Hope this helps,
-denver