RHEL 5.3 Sendmail 8.13.8 and Vanilla Sendmail 8.14.1

[hike]

On Thu, May 28, 2009 at 10:19 AM, Paul Whitney <paul.whitney at mac.com> wrote:

>
> Can someone tell me if these two sendmail packages are essentially the
> same? I ran an SRR provided by DISA and was advised to upgrade Sendmail
> to 8.14.1. However, Redhat site does not even list it. I suspect the
> finding is a false-positive and whatever vulnerabilities/patches in
> 8.14.1 are actually included in RHEL 5.3 sendmail.
>
> Can someone please confirm and tell me where this is documented?
>
> Thank you,
>
> Paul W.
> --
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
>


any package can be upgraded to the latest and greatest from the
vendor/project site.
but (and it is a big but), you have taken the package out of the red hat
automatic updates.
you have to maintain the package by a different mechanism.