Upgrading from 8.9.3> 8.12.8 of sendmail

[MarkW_1]

I have executed the ./build for the new version of sendmail, but it appears that I still have the same version:

# what /usr/sbin/sendmail
/usr/sbin/sendmail:
Copyright (c) 1998 HEWLETT PACKARD COMPANY and its licensors,
including Sendmail, Inc., and the Regents of the
University of California. All rights reserved.
version.c 8.9.3.1 (Berkeley) 31/8/2001 (PHNE_24419)
# telnet tiwal1 25
Trying...
Connected to tiwal1.uhcolorado.edu.
Escape character is '^]'.
220 tiwal1.uhcolorado.edu ESMTP Sendmail 8.9.3 (PHNE_24419)/8.7.1; Fri, 7 Mar 2003 14:35:58 -0700 (MST)

What am I missing?

[Steven E. Protter]

For one thing, you haven't succesfully upgraded yet.

At least the relay server isn't upgraded.

The 8.9.3 release was based on HP binaries, upgraded by patch PHNE_24419

As far as I know, as of yesterday, 8.12.8 isn't available in SD-UX format.

I'll assume you tried to install of tar download from sendmail.org and failed.

An error message would be very useful from the install process. To install you'll need the prerequisite compilers which probably came with the OS.

HP is distributing pre-compiled binaries of sendmail itself that deal with recent security alerts.

There are also alerts concerning the permissions of files in /etc/mail and /etc/aliases

Probably a good idea to not let non-root users do anything other than read those.

An error message off the build would be very useful.

SEP

[Denver Osborn]

Hi Mark,

The version of sendmail on your box should be updated to avoid the recent vulnerability (posts here on the forum about this). Here's what you should do now until you get the 8.12.8 version compiled and in place...


ftp hprc.external.hp.com
user= sendmail
pass= sendmail

ftp> bin
ftp> get sendmail.893.1100.gz
ftp> bye

# gunzip sendmail.893.1100.gz
# /sbin/init.d/sendmail stop
# mv /usr/sbin/sendmail /tmp/sendmail.bad
# mv sendmail.893.1100 /usr/sbin/sendmail
# chmod 7555 /usr/sbin/sendmail
# chown root:mail /usr/sbin/sendmail
# /sbin/init.d/sendmail start

To verify you have the fix...
# what /usr/sbin/sendmail
--> look for (PHNE_24419+JAGae58098)

Hope this helps,
-denver

[Brian M Rawlings]

Denver: thanks from many of us. Excellent info, concisely and thoroughly presented.

I don't ordinarily soapbox for points (none for me, please), but I hope Mark will give you your due (something in a magic rabbit would be nice).

Regards, --bmr