General
cancel
Showing results for 
Search instead for 
Did you mean: 

Upgrading from 8.9.3> 8.12.8 of sendmail

MarkW_1
Regular Advisor

Upgrading from 8.9.3> 8.12.8 of sendmail

I have executed the ./build for the new version of sendmail, but it appears that I still have the same version:

# what /usr/sbin/sendmail
/usr/sbin/sendmail:
Copyright (c) 1998 HEWLETT PACKARD COMPANY and its licensors,
including Sendmail, Inc., and the Regents of the
University of California. All rights reserved.
version.c 8.9.3.1 (Berkeley) 31/8/2001 (PHNE_24419)
# telnet tiwal1 25
Trying...
Connected to tiwal1.uhcolorado.edu.
Escape character is '^]'.
220 tiwal1.uhcolorado.edu ESMTP Sendmail 8.9.3 (PHNE_24419)/8.7.1; Fri, 7 Mar 2003 14:35:58 -0700 (MST)

What am I missing?
3 REPLIES
Steven E. Protter
Exalted Contributor

Re: Upgrading from 8.9.3> 8.12.8 of sendmail

For one thing, you haven't succesfully upgraded yet.

At least the relay server isn't upgraded.

The 8.9.3 release was based on HP binaries, upgraded by patch PHNE_24419

As far as I know, as of yesterday, 8.12.8 isn't available in SD-UX format.

I'll assume you tried to install of tar download from sendmail.org and failed.

An error message would be very useful from the install process. To install you'll need the prerequisite compilers which probably came with the OS.

HP is distributing pre-compiled binaries of sendmail itself that deal with recent security alerts.

There are also alerts concerning the permissions of files in /etc/mail and /etc/aliases

Probably a good idea to not let non-root users do anything other than read those.

An error message off the build would be very useful.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Denver Osborn
Honored Contributor

Re: Upgrading from 8.9.3> 8.12.8 of sendmail

Hi Mark,

The version of sendmail on your box should be updated to avoid the recent vulnerability (posts here on the forum about this). Here's what you should do now until you get the 8.12.8 version compiled and in place...


ftp hprc.external.hp.com
user= sendmail
pass= sendmail

ftp> bin
ftp> get sendmail.893.1100.gz
ftp> bye

# gunzip sendmail.893.1100.gz
# /sbin/init.d/sendmail stop
# mv /usr/sbin/sendmail /tmp/sendmail.bad
# mv sendmail.893.1100 /usr/sbin/sendmail
# chmod 7555 /usr/sbin/sendmail
# chown root:mail /usr/sbin/sendmail
# /sbin/init.d/sendmail start

To verify you have the fix...
# what /usr/sbin/sendmail
--> look for (PHNE_24419+JAGae58098)

Hope this helps,
-denver
Brian M Rawlings
Honored Contributor

Re: Upgrading from 8.9.3> 8.12.8 of sendmail

Denver: thanks from many of us. Excellent info, concisely and thoroughly presented.

I don't ordinarily soapbox for points (none for me, please), but I hope Mark will give you your due (something in a magic rabbit would be nice).

Regards, --bmr
We must indeed all hang together, or, most assuredly, we shall all hang separately. (Benjamin Franklin)