03-04-2003 07:47 AM
03-09-2003 02:38 AM
03-09-2003 10:20 AM
03-11-2003 12:52 AM
just compiling the new sendmail sources and replacing the binaries won??t work, cause Sendmail 8.12 uses two mailqueues. So you have to rebuild the sendmail.cf and make some other configuration changes.
The easiest way is to patch your current Sendmail with an rpm-package from redhat (if you have the redhat-distribution installed)
Download the patch and install it with "rpm -u package-name". Then restart sendmail. Be sure to make an backup copy of /etc/mail (whole directory) and /etc/sendmail.cf
03-13-2003 06:28 AM
follow next link to the HPUX forum, the link is specified call about sendmail Vulnerability.
03-13-2003 09:33 AM
03-13-2003 07:08 PM
03-16-2003 07:48 PM
We are very close to simply buying a cobalt and being done with this crapola.
03-17-2003 10:59 PM
the rpm program offers an option, to test the dependencies of an rpm package (i.e. rpm -U --test rpm-package)
IMHO you could upgrade to 8.11.6-126 (where 126 is the patch level), whithout config changes. This version is secured against the Vulnerability.
sendmail 8.12.x is working different to the prior versions and so you have to configure it again, if you upgrade to this version.
03-18-2003 02:40 PM
What I finally did was to download the patched source RPM (sendmail-8.11.6-1.62.2.src.rpm), did an install ("rpm -i sendmail...etc"), then compiled it ("sh Build").Then Icopied each of the following files to a .bak backup in its subdirectory.
I then stopped the mail daemon using the web-based control screen.
I now had a backup copy of each of these files in its subdir ready to copy back into position should this upgrade fail. I then copied the new version of each of these new files into the appropriate subdirectory and restarted the mail daemon using the web-based controls.
The control page reported that sendmail had started and was running. I then went to an account outside this system and sent a test email which worked. Then I watched /var/log/maillog for a few minutes looking for obvious problems. None so far. :)
If you need to upgrade your SA1100 appliance server this method should work for you as well. I want to thank all who offered their suggestions.
03-30-2003 05:02 AM
I have a SA1120 and various other 1U servers and plenty of disk space, that i would be fully prepared to make available if anyone wants to get involed in creating a new image.