help in applying sendmail patch please
 

Hi

i would like to know exactly how to apply this patch please?

http://www.sendmail.org/patchcr.html

Patch for sendmail 8.12

I do not understand exactly how to do it? Especially where it reads /PATH/TO/sendmail.8.12.security.cr.patch.

When i look at the patch it is a whole lot of code!! I thought it would be an executable but it is not.

Please help!!

thanks

in addition how do i recompile sendmail and install the new binary. I am lost.

Please help me!!

thanks again

Seems to mean:


PATH TO will be the directory you downloaded the patch to eg.
/home/my home directory


cd to your sendmail directory

run the command whilst in sendmail directory:

patch -p0 < /home/my home directory/sendmail.patch





How did you install it in the first place ? Did it come as an rpm?

ok, seems easier to understand - thankyou

So how do i recompile sendmail and install the new binary?

thanks again

yes, sorry i did not see your question - i chose it as part of the install, i was using X - so yes it was an rpm

thanks

Another question :)
Which distro you using?

red hat 8.0 server - is this what you mean by distro?

thanks

You won't be able to apply the patch from the sendmail site as far as I'm aware seeing as it's for those who installed from source.


I'm running sendmail myself current version from RedHat

sendmail-8.12.8-5.90

There are no updates available currently from RedHat so I'm assuming
that this version is okay (hopefully not wrongly)

that is great however when i ran languard on my system it is saying that i have 8.12.5/8.12.5 installed and that it is vulnerable to this remote buffer overflow

Take a look at this site for your version

http://www.sendmail.org/8.12.8.html

help please!!

Out of curiosity I downloaded languard, updated it and ran it agains my internal and external IP's - nothing unexpected was reported.


Have you ran up2date?

Apologises if I'm causing you to pull your hair out :)

no, i haven't but will this update sendmail for me?

How do i run it?

thanks

Assuming you have the normal RedHat and you meant when you installed it you choose server rather than desktop or workstation if you open a shell and change to root and type in up2date it will start up and
and prompt you to register (if you didn't all ready) and then will update all the packages RedHat installs and has updates for. If that don't work try rhn_register. It 's free.

Don't know about the Red Hat Server editions that they sell though if that's what you've got.

yes, you are correct. I chose server rather than workstation. I have 6 cds that came with pc world minibooks which included full 3 cd release of red hat linux 8.0 but i do not understand why you have got sendmail 8.12.8 and i have got 8.12.5.

I will try up2date tomorrow. But, will it update sendmail as well?

What do you think of this page?

http://www.sendmail.org/patchps.html

I'm running RedHat 9 and I guess also because I've been updating using the up2date.

If you've never applied any updates I guess you've still got the original version that came with the disks.

The update thing will upgrade for you.

As for the sendmail patch page I noticed is dated 29th March so I'm assuming any patches that have needed applied have been incorporated by now in the one's Red Hat have available.

thanks heaps looking lost.

Will try up2date tomorrow and let you know.

I love these groups!!!