<div class="gmail_quote">On Wed, Apr 2, 2008 at 11:29 AM, inode0 <<a href="mailto:inode0@gmail.com">inode0@gmail.com</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> I've run across this situation a few times in the past and again this morning. <a href="https://rhn.redhat.com/errata/RHSA-2008-0197.html" target="_blank">https://rhn.redhat.com/errata/RHSA-2008-0197.html</a> was released this morning and fixes a security issue in the version of the package in the base channel (gnome-screensaver-2.16.1-5.el5_1.1 is the new fixed version) but in the fastrack channel there exists version 2.16.1-6 which does not have an errata at this time. The changelog for the fastrack package suggests nothing about this errata so I'm again asking for some mechanism to be found whereby users who are concerned about security can determine whether a package such as this is vulnerable or not. If it is known to be not vulnerable please include this information in the released errata. And if someone could tell me whether or not it is vulnerable that would be swell too for this case. Thanks, John _______________________________________________ rhn-users mailing list <a href="mailto:rhn-users@redhat.com">rhn-users@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/rhn-users" target="_blank">https://www.redhat.com/mailman/listinfo/rhn-users</a> </blockquote></div> you might consider opening a ticket and asking Red Hat. if you have a current subscription, this support is included.