Redhat9 and Sendmail patch issue

[Rushan Sobar]

----- Original Message ----- 
From: "Reuben D. Budiardja" <techlist at voyager.phys.utk.edu>
To: "General Red Hat Linux discussion list" <redhat-list at redhat.com>; 
"Rushan Sobar" <Rushan at mec.com.jo>
Sent: Monday, February 28, 2005 2:00 AM
Subject: Re: Redhat9 and Sendmail patch issue


> On Sunday 27 February 2005 11:44, Rushan Sobar wrote:
>> Hi All,
>>
>> In sendmail website http://www.sendmail.org/parse8.359.2.8.html
>>
>
> If you do
> $> rpm --changelog -q sendmail | grep CAN-2003-0694
>
> and get a result, you'll see that your version of sendmail is already 
> patched
> for the security flaw that you mentioned. CAN-2003-0694 and CAN-2003-0681 
> are
> the reference for that patch. For more info :
> http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0694
> http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0681
>
> Bottom line, if you're running:
>
> # rpm -q sendmail
> sendmail-8.12.8-9.90
>
> you don't have to worry about that patch. It's already there.
>
> RDB
>
> -- 
> Reuben D. Budiardja
> Dept. Physics and Astronomy
> University of Tennesse, Knoxville, TN
>
> -----BEGIN GEEK CODE BLOCK-----
> Version: 3.12
> GIT/M/MU/P/S d-(++) s: a-- C++(+++) UL++++ P-- L+++>++++ E- W+++
> N+ o? K- w--- !O M- V? !PS !PE Y PGP- t+ 5 X R- tv+
> b++>+++ DI D(+) G e++>++++ h+(*) r++ y->++++
> ------END GEEK CODE BLOCK------
>

Thank you Reuben for the useful information,
for time being am using sendmail-8.12.9-2.90 , download it from 
http://www.btree.org/linux/packages/redhat/9/i386/sendmail-8.12.9-2.90/
and the command rpm --changelog -q sendmail | grep CAN-2003-0694
show nothing, so should I roll back to sendmail-8.12.8-9.90 or 8.12.9-2.90 
should be build on 8.12.8-9.90  and already patch.

Regards
RMS 



-- 
This message has been scanned for viruses and
dangerous content by MEC E-Mail Scanner, and is
believed to be clean.
--
www.mec.com.jo