[2007] in linux-security and linux-alert archive
[linux-security] Re: Qpop CERT advisory?
daemon@ATHENA.MIT.EDU (Rogier Wolff)
Mon Jul 20 03:14:40 1998
In-Reply-To: <Pine.LNX.3.96.980719155333.7928B-100000@phoenix.webslingerZ.com> from Donald Ball at "Jul 19, 98 03:56:29 pm"
To: balld@webslingerZ.com (Donald Ball)
Date: Mon, 20 Jul 1998 07:28:26 +0200 (MEST)
Cc: linux-security@redhat.com
From: R.E.Wolff@BitWizard.nl (Rogier Wolff)
Resent-From: linux-security@redhat.com
Resent-Reply-To: linux-security@redhat.com
Donald Ball wrote:
> > The simplest thing to do is to check the errata on RedHat's web site.
> > They provide updates and they're usually timely. They've been doing a
> > security audit and a number of updates should be installed.
>
> I was a bit distressed recently to discover that many security related
> patches which are relevant to redhat 5.0 and 5.1 are only being posted to
> the 5.1 errata list; I'm still running two production 5.0 servers and
> hadn't thought to check the 5.1 list for patches. Learned my lesson,
> hopefully in time. :)
The recommended solution for 5.0 is "upgrade to 5.1". If you're "in"
the 4.x series the recommended action is "upgrade to 4.2". This allows
people to postpone upgrading to 5.x for a while. This limits the
number of versions that RedHat needs to maintain.
It is quite possible that there are fixes in 5.1 that are not in the
5.0 errata.
Roger.
--
Actor asks a collegue: "To what do you owe your success in acting?"
Answer: "Honesty. Once you've learned how to fake that, you've got it made."
-------- Custom Linux device drivers for sale! Call for a quote. ----------
Email: R.E.Wolff@BitWizard.nl || Tel: +31-15-2137555 || FAX: +31-15-2138217
--
----------------------------------------------------------------------
Please refer to the information about this list as well as general
information about Linux security at http://www.aoy.com/Linux/Security.
----------------------------------------------------------------------
To unsubscribe:
mail -s unsubscribe linux-security-request@redhat.com < /dev/null
