[2012] in linux-security and linux-alert archive
[linux-security] Re: Qpop CERT advisory?
daemon@ATHENA.MIT.EDU (Wojtek Pilorz)
Tue Jul 21 12:15:20 1998
Date: Tue, 21 Jul 1998 08:50:42 +0200 (MET DST)
From: Wojtek Pilorz <wpilorz@bdk.pl>
To: Rogier Wolff <R.E.Wolff@BitWizard.nl>
cc: Donald Ball <balld@webslingerZ.com>, linux-security@redhat.com
In-Reply-To: <199807200528.HAA00426@cave.BitWizard.nl>
Old-Return-receipt-to: wpilorz@celebris.bdk.lublin.pl
Resent-From: linux-security@redhat.com
Resent-Reply-To: linux-security@redhat.com
On Mon, 20 Jul 1998, Rogier Wolff wrote:
[...]
>
> It is quite possible that there are fixes in 5.1 that are not in the
> 5.0 errata.
>
> Roger.
On the other hand, some fixed packages for 5.1 (e.g.
imap-4.1.final-1.i386.rpm) are in redhat-5.0/updates/i386 directory
only and NOT in redhat-5.1/updates/i386;
This way if you not read errata carefully enough, you might get false
sense of security by watching redhat-5.1/updates only;
I would believe it would be a good idea to have at least symbolic links
in 5.1/updates tree to 5.1 updates which are placed only in 5.0/updates.
Best regards,
Wojtek Pilorz
[mod: Erik Troan reports that this should already be the case. He will
try not to forget those links in the future, the Imap one might have
been missing until last night, but is in place right now. -- REW]
--
----------------------------------------------------------------------
Please refer to the information about this list as well as general
information about Linux security at http://www.aoy.com/Linux/Security.
----------------------------------------------------------------------
To unsubscribe:
mail -s unsubscribe linux-security-request@redhat.com < /dev/null
