Latest Sendmail?

[Robert True]

What is the latest HP version of Sendmail for 11.0 and where can I pickup the depot pkg?

[Pete Randall · Accepted solution]

Hi Robert,

I think this is what you're looking for:

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=SMAIL811


Pete

[Uday_S_Ankolekar]

Sendmail 8.11.1 is the latest

Download for free from here!.


http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=SMAIL811

-USA..

[Steven E. Protter]

There is a binary upgrade you need to do after you do the depot installation. Just a replacement of the sendmail executable due to a security flaw.

Read this thread to find out how.

http://forums.itrc.hp.com/cm/QuestionAnswer/0,,0x82599c196a4bd71190080090279cd0f9,00.html

SEP

[Pete Randall]

I would certainly hope that HP has incorporated that fix into their sendmail distribution by now! Comments? Berlene - are you out there?


Pete

[Robert True]

Thanks everyone, the info linked to was confusing but I was able to determine (I think) I have the lastest version and FIX after downloading the 8.11.1 special release from the software depot.

[Steven E. Protter]

I think I'm going to email Carly's office?

They need to get ahead of this sendmail thing. Can anyone suggest a more appropriate person to contact directly?

SEP

[Berlene Herren]

Steven, I have passed your frustration on and someone from HP will be calling you. Probably not Carly :-)

Berlene

[Berlene Herren]

See this posting concerning sendmail fixes...

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xe049b82b2d63d71190080090279cd0f9,00.html

berlene

[Steven E. Protter]

Thanks Berlene,

As you know, my frustration is because I'm getting hounded on security issues and you and I proved that any user in my building can run the exploit.

I was stupid, I told my management about it.

SEP

[Scott Donaldson]

Hi,

I have just installed the sendmail.811.11.11.r2 binary on my 11.00 box and it does not run. When I attempt to test it with the following command:

# sendmail -bt -d0.1
This happens:

/usr/lib/dld.sl: Unresolved symbol: in6addr_any (data) from sendmail
Abort(coredump)

I can only guess that maybe it was built with IPv6 support/libraries....that I don't have.

Can we get a IPv4 only version (if my guess is correct) ?

Scott Donaldson

[Berlene Herren]

Investigating Scott...I will find the problem and post it.

Berlene

[Berlene Herren]

I did the same thing, Scott.

# what /usr/sbin/sendmail
/usr/sbin/sendmail:
Copyright (c) 1998 HEWLETT PACKARD COMPANY and its licensors,
including Sendmail, Inc., and the Regents of the
University of California. All rights reserved.
version.c 8.11.1 (Berkeley) - Revision 1.3_binary - 03/04/2003
#

this is what you are supposed to see. You need to apply sendmail.811.11.00.r1.gz for 8.11.1 on 11.0.

Confusing enough? :-)

Berlene

[Scott Donaldson]

Berlene,

Thanks for taking the time.

>> Stupid Admin trick <<

Yes I did try to install the 11.11 version on 11.00 .

I made the assumption that the .r1 releases were for the Previous issue and that the .r2 releases were required for the most recent sendmail issue.

Luckily I did download the correct version and it does work.

# what /usr/sbin/sendmail
/usr/sbin/sendmail:
Copyright (c) 1998 HEWLETT PACKARD COMPANY and its licensors,
including Sendmail, Inc., and the Regents of the
University of California. All rights reserved.
version.c 8.11.1 (Berkeley) - Revision 1.3_binary - 03/04/2003


Since it is dated 03/04/2003 does it have a fix in it for the most recent sendmail issue?

[Berlene Herren]

Not a problem Scott, I think the font is too small in those bulletins, too :-)

Yes, this incorporates both fixes.

Berlene

[juno2]

Hi Scott Donaldson,

where can u get the depot "sendmail.811.11.00.r1.gz" ? can youu let me have the link? thx

[Berlene Herren]

Juno2, check this thread:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x242963f96280d711abdc0090277a778c,00.html

You can get the .r1 binary OR load the latest patches for 11.0 and 11i. Patch for 10.20 will be released later.

Berlene