atom feed23 messages in org.freebsd.freebsd-securityRe: SA-03:04.sendmail Bin Update
FromSent OnAttachments
Mike TancsaMar 3, 2003 9:26 am 
Bruce A. MahMar 3, 2003 9:56 am 
Chris SamaritoniMar 3, 2003 11:38 am 
Jacques A. VidrineMar 3, 2003 11:56 am 
Jason StoneMar 3, 2003 1:43 pm 
Matthew SeamanMar 3, 2003 3:45 pm 
Chris McCluskeyMar 3, 2003 4:58 pm 
Hans ZaunereMar 3, 2003 6:28 pm 
Claus AssmannMar 3, 2003 8:06 pm 
Chris McCluskeyMar 3, 2003 8:08 pm 
Peter ElsnerMar 4, 2003 6:35 am 
Jacques A. VidrineMar 4, 2003 7:06 am 
Jacques A. VidrineMar 4, 2003 7:07 am 
Mike TancsaMar 4, 2003 9:46 am 
Greg ShenautMar 4, 2003 9:58 am 
Brett GlassMar 4, 2003 10:12 am 
Mike TancsaMar 4, 2003 11:13 am 
Chris McCluskeyMar 5, 2003 1:52 am 
Jacques A. VidrineMar 5, 2003 6:21 am 
GeoffreyMar 5, 2003 12:09 pm 
Andrés VargasMar 5, 2003 12:43 pm 
Jacques A. VidrineMar 5, 2003 1:04 pm 
Andrés VargasMar 5, 2003 1:43 pm 
Subject:Re: SA-03:04.sendmail Bin Update
From:Peter Elsner (pet@servplex.com)
Date:Mar 4, 2003 6:35:56 am
List:org.freebsd.freebsd-security

Step by step instructions

ftp sendmail.org login anonymously cd pub/sendmail get sendmail-8.12.8.tar.gz quit tar xvzf sendmail-8.12.8.tar.gz cd sendmail-8.12.8 ./Build ./Build install

kill -1 (SIGHUP) sendmail

You're now upgraded....

At 06:29 PM 3/3/2003 -0800, you wrote:

--- Chris McCluskey <chr@digitaldeck.com> wrote:

Ok...

Here's what I show:

namehere# telnet namehere 25 Trying 192.x.y.z... Connected to namehere.digitaldeck.com. Escape character is '^]'. 220 namehere.digitaldeck.com ESMTP Sendmail 8.12.6/8.12.6; Mon, 3 Mar 2003 16:22:53 -0800 (PST)

namehere# strings sendmail-4.7-i386-nocrypto.bin |grep 8.12 @(#)$Id: safefile.c,v 8.124 2002/05/24 20:50:15 gshapiro Exp $ 8.12.6

I have been tracking RELENG_4_7 and it looks like 4.12.6 to me. So again, I want to make sure that this version of Sendmail has been patched. What's the best verification procedure to insure that the patched version is online?

I'm in the exact same situation. I replaced the sendmail binary but it shows the same sig as before. While I have great confidence in the FreeBSD team, is there some way I can validate everything is kosher?

To Unsubscribe: send mail to majo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message

---------------------------------------------------------------------------------------------------------- Peter Elsner <pet@servplex.com> Vice President Of Customer Service (And System Administrator) 1835 S. Carrier Parkway Grand Prairie, Texas 75051 (972) 263-2080 - Voice (972) 263-2082 - Fax (972) 489-4838 - Cell Phone (425) 988-8061 - eFax

I worry about my child and the Internet all the time, even though she's too young to have logged on yet. Here's what I worry about. I worry that 10 or 15 years from now, she will come to me and say "Daddy, where were you when they took freedom of the press away from the Internet?" -- Mike Godwin

Unix IS user friendly... It's just selective about who its friends are. System Administration - It's a dirty job, but somebody said I had to do it. If you receive something that says 'Send this to everyone you know, pretend you don't know me.

Standard $500/message proofreading fee applies for UCE.

To Unsubscribe: send mail to majo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message