Checking sendmail MD5 checksums

This page is maintained manually by Neil Rickert, and is not automatically copied from the sendmail.org site. This makes it relatively unlikely that an intruder could break into both the sendmail site and this site, and install the same bogus MD5 checksums in both places.

The preferred way of verifying a sendmail distribution is to check the pgp signature. If you already trust the sendmail signing keys, then the pgp signature is a very reliable test. However, if you do not yet trust the sendmail signing keys, then the md5 checks can give you as much assurance as the pgp checks. They are also simpler to use.

My advice is to use the pgp signature if possible. But until you are experienced in the use of pgp, and until you have decided to trust the sendmail signing keys, you should also check the md5 checksums.

You can use the md5sum software (available at gnu archive sites) to check MD5 checksums.

A typical command would be

	md5sum sendmail.8.12.11.tar.gz

Compare your output with the values given at the sendmail.org site and with those shown below.

The checksums shown below should be identical to those at the sendmail site. However, comparing with both is a good cross check, in case an intruder has broken into one of the sites and installed bogus data.

Note that the MD5 sums below were determined after I had downloaded the file from the sendmail site, and checked the PGP signatures. The MD5 sums for the "*.tar" files were determined after gunzip of the already checked "*.tar.gz" files.

You need only check the MD5 sum for the particular file(s) that you downloaded. Or, if you have already used "gunzip" or "uncompress" on that file, check the MD5 sum for the resulting *.tar file.

MD5 checksums for sendmail-8.11.6

db74e6149b3b47294dbceded31357ac5  sendmail.8.11.6.tar.Z
a57e7681d810d9d6400cbe6bbcf06aa0  sendmail.8.11.6.tar.gz
63d401e83c09ef23725eb5d389e0cb83  sendmail.8.11.6.tar

MD5 checksums for sendmail-8.11.7

0ffd529b7590767b8b54dc7a012deeb3  sendmail.8.11.7.tar.Z
96437c0ffdc23b02a5d3757017c295ec  sendmail.8.11.7.tar.gz
418be0ccadab585f223047cfd5b5be8e  sendmail.8.11.7.tar

MD5 checksums for the sendmail security patches for the header problem

79af47017c18af0a321649c1272f2777  sendmail.8.11.6.security.cr.patch
4cfe0a907ea3f252c4bf1c25ad6ca96e  sendmail.8.12.security.cr.patch
493fb52d1626ea48047009d5839555f5  sendmail.8.9.3.security.cr.patch

MD5 checksums for the sendmail security patches for the prescan problem

1c83f14f44fbabf5b56070c701518663  prescan.tar.gz.uu
7d2035a556e44959e2777fc74b3719ca  prescan.tar.gz

MD5 checksums for sendmail-8.12.10

36b2b74577a96f79c242ff036321c2ff  sendmail.8.12.10.tar.Z
393f5d09d462f522c8288363870b2b42  sendmail.8.12.10.tar.gz
c3afbd35d4bbca823b83ddd68f4135b7  sendmail.8.12.10.tar

MD5 checksums for sendmail-8.12.11

e10751f24e7acc4e78037feca787d60b  sendmail.8.12.11.tar.Z
fafda7f8043f0c34b9aa295618aa598c  sendmail.8.12.11.tar.gz
d4d1ffad94d8204041a5ebebfff52216  sendmail.8.12.11.tar

MD5 checksums for sendmail-8.13.0

46f9d3d829644134a7fd193d83c9e41f  sendmail.8.13.0.tar.Z
434aad7d9d151da5dd9d059eb0085e9a  sendmail.8.13.0.tar.gz
f5dcbb6b86b27f31acea6a897285ade4  sendmail.8.13.0.tar

MD5 checksums for sendmail-8.13.1

5407db289086261d7e7a09920d2ea14e  sendmail.8.13.1.tar.gz
30a3113937b09a71f6bc8aeb46557dbd  sendmail.8.13.1.tar.Z
f51798a516d6e3229b7bf65b6a915950  sendmail.8.13.1.tar

MD5 checksums for sendmail-8.13.2

0331828b9dcf7aa20e02992502c6f41f  sendmail.8.13.2.tar.gz
92fa3b554d7ceaed46f88033d304bc83  sendmail.8.13.2.tar.Z
8d7947892192bc528b3911d20e5a9e39  sendmail.8.13.2.tar

MD5 checksums for sendmail-8.13.3

2809fbf9c8b067947b650d0128928d05  sendmail.8.13.3.tar.gz
d3b28815512f5fc015b6b1c8d8ef9c1a  sendmail.8.13.3.tar.Z
c569b65b848c0b90850c8ffa3e796e3a  sendmail.8.13.3.tar

61e336750b48b01abaa69b4d7c9473b5  sendmail.8.13.4.tar.gz
e6015f9df4a71a8473729548db1b813c  sendmail.8.13.4.tar.Z
98a19dafa4fa03c34c0ce2dac84573b9  sendmail.8.13.4.tar

f4550d8dcc55771f4a81e999c7d6df20  sendmail.8.13.5.tar.gz
2659473af89127900511397cf05d535a  sendmail.8.13.5.tar.Z
4ccc5955091c4e34ee7825da51f2d6cc  sendmail.8.13.5.tar

484cca51f74b5e562b3cf119ceb2f900  sendmail.8.13.6.tar.gz
51a1dc709664cb886785c340dc87faed  sendmail.8.13.6.tar.Z
ad9aa962b90539844109de0ad5254c13  sendmail.8.13.6.tar

5327e065cb0c1919122c8cecbeddbc28  sendmail.8.13.7.tar.gz
fff614180192995ff5b2c8660aa86594  sendmail.8.13.7.tar.Z
d928474c95746bd51f39cf6ef81603be  sendmail.8.13.7.tar

5f29c94b42e0bb74d546b2ae84203a1e  sendmail.8.13.8.tar.gz
3607b2a33a1b060bba5d0fc27aaf87c5  sendmail.8.13.8.tar.Z
a6d521106b8a4e9e7dfbc165176f4242  sendmail.8.13.8.tar

bc0dee396b8090b3f696e748a9caf83d  sendmail.8.14.0.tar.gz
e2d1b6436e7354181122d865627b4db2  sendmail.8.14.0.tar.Z
f4385676b759618cda3b6cc0434fbf23  sendmail.8.14.0.tar

462bc9e00fdbef3a71b046b967c9a157  sendmail.8.14.1.tar.gz
42c93c00c09f884fe311ab2d3a6b6fef  sendmail.8.14.1.tar.Z
c3086b05fcd8932fa7249bea6f2d517c  sendmail.8.14.1.tar

de82b59a3e042acd6f05c55ff7392c57  sendmail.8.14.2.tar
cf784b9f20c32949ae1f38f3eae29875  sendmail.8.14.2.tar.Z
1c1472365344ca8061d6453c43c9a831  sendmail.8.14.2.tar.gz

7f14567922c6a21906d11fab9189f1a6  sendmail.8.14.3.tar
ed4ad6abef116723b34fb52ead0fbb07  sendmail.8.14.3.tar.Z
a5ee5d26e1f546a2da5fb9a513bd6bce  sendmail.8.14.3.tar.gz