sendmail security bugs

[francs]

Hi
We recently had a security audit on our systems and one of the recommendations was that sendmail (currently 8.9.3) be upgraded to 8.11.3 or later. The versions up until 8.11.3 had security bugs, etc. in them.
I ordered and installed the latest maintenance release ( 4330-08), but the sendmail version is still at level 8.9.3.
My HP-UX colleuge say that on HP the sendmail version is also 8.9.3 (after lastest fixes were installed), but these security problems are fixed by other filesets.

Is this the case on AIX or should I just download the latest sendmail from Bull and install that?

Thanks

 

[aixqueen]

well 8.1.1 comes with AIX 5L
If you have aix 4.3.3. maint 8 you have the latest biggies.....fix wise...
there was one additional feburary 2001 patch (general patches) IY16723

Did the patches fix all of the bugs in sendmail....not sure.........but there were a lot
of security patches that were applied....so some were fixed....

The level sendmail you have of AIX is the supported version for 4.3.3....but I am sure that 8.1.1 will work just fine.... not sure if it is worth the hassle?

Others more security aware hopefully will respond........