sendmail security alerts

[Elena Leontieva]

Hello,

I am confused with the latest sendmail security alerts. HP doc refers to the fileset
SMAIL-UPGRADE.INETSVCS-SMAIL, revision=B.11.11.02.001

I have Version 8.9.3 (PHNE_29774) and
swlist -a revision -l fileset |grep -i inetsvcs
InternetSrvcs.INETSVCS-BOOT B.11.11
InternetSrvcs.INETSVCS-DTC B.11.11
InternetSrvcs.INETSVCS-INC B.11.11
InternetSrvcs.INETSVCS-INETD B.11.11
InternetSrvcs.INETSVCS-RUN B.11.11
PHCO_31314.INETSVCS-BOOT 1.0
PHCO_31923.INETSVCS-INETD 1.0
PHNE_24384.INETSVCS-RUN 1.0
PHNE_24512.INETSVCS-BOOT 1.0
PHNE_28328.INETSVCS-INETD 1.0
PHNE_28841.INETSVCS-RUN 1.0
PHNE_29774.INETSVCS-RUN 1.0
PHNE_30068.INETSVCS-RUN 1.0
PHNE_32449.INETSVCS-BOOT 1.0
PHNE_33412.INETSVCS-RUN 1.0
PHNE_33791.INETSVCS-RUN 1.0

I do not see any revision of SMAIL-UPGRADE.INETSVCS-SMAIL on the server.

I am not sure I have an affected version of sendmail and need to install the latest sendmail.

Thanks for clarification in advance.

Elena.

[Arunvijai_4 · Accepted solution]

Hi Elena,

As per http://www.sendmail.org/, Sendmail urges all users of sendmail 8 to upgrade to sendmail 8.13.6.

This Security alert should useful,

http://secunia.com/advisories/19394/

It has got a link to download latest patches from

Solution:
Apply preliminary updates from FTP server.
ftp://sendmail:sendmail@hprc.external.hp.com/

-Arun