We are currently using sendmail version 8.8.8 and I just received a CERT
advisory (CA-2003-07) that suggests upgrading to version 8.12.8 due to a
vulnerability in the earlier version. Is this something I can get from
QSSL and if so, where can I get a copy from?
Given the track record of QSS dealing with security issues,
I guess you will have to wait for a while, if there is a patch
at all.
If you are in a hurry, you should download the latest 8.8.x source
and port it yourself . This way, you won’t have to worry about
recreating/upgrading the config file (sendmail.cf).
I don’t know if sendmail.org issued a patch for this old 8.8 branch,
if not, you will have to spend more time to get the latest version
working …
Tony Williams <tony@ctcqnx4.ctg.cummins.com> wrote:
We are currently using sendmail version 8.8.8 and I just received a CERT
advisory (CA-2003-07) that suggests upgrading to version 8.12.8 due to a
vulnerability in the earlier version. Is this something I can get from
QSSL and if so, where can I get a copy from?
- Tony
Tony Williams <> tony@ctcqnx4.ctg.cummins.com> > wrote:
We are currently using sendmail version 8.8.8 and I just received a CERT
advisory (CA-2003-07) that suggests upgrading to version 8.12.8 due to a
vulnerability in the earlier version. Is this something I can get from
QSSL and if so, where can I get a copy from?
Some time ago I have got a ported version of Sendmail 8.9.3 from Jean-
Hugues Royer <jhroyer@joher.com>. It works perfectly. I don’t know,
whether Jean-Hugues is still in business with QNX4 - if yes, it should
be easy for him to apply the patch provided at www.sendmail.org and
recompile …
Regards - Jochen
Jochen Schneider <jschneider@ds3.etech.haw-hamburg.de> wrote:
Tony Williams <> tony@ctcqnx4.ctg.cummins.com> > wrote:
We are currently using sendmail version 8.8.8 and I just received a CERT
advisory (CA-2003-07) that suggests upgrading to version 8.12.8 due to a
vulnerability in the earlier version. Is this something I can get from
QSSL and if so, where can I get a copy from?Some time ago I have got a ported version of Sendmail 8.9.3 from Jean-
Hugues Royer <> jhroyer@joher.com> >. It works perfectly. I don’t know,
whether Jean-Hugues is still in business with QNX4 - if yes, it should
be easy for him to apply the patch provided at > www.sendmail.org > and
recompile …
Check http://www.openqnx.com/Article162.html for the latest
sendmail for QNX4.
It’s a bit late (5 months later), but QSS hasn’t provided a solution
yet AFAIK. So it’s still a good news.
QSS has moved all resources onto the new QNX6 and the support for QNX4
is little, even for CERT advisories. The community needs to self
support whenever possible.
Frank