Re: [cobalt-users] RaQ3E-Update-OS-2.0 interaction with RaQ3-Security-2.2

[Raymond Yip <raymond@xxxxxxxxxx>]

Hi,

Due to some recent developments, please NOTE the following information:

1. With regards to the instructions to install the RaQ3-Security-2.2
update, we advise that this NOT be performed just yet. 

We have recently discovered that the RaQ3-Security-2.2 update will cause
admin/site admins not have permissions to change user preferences, like
their passwords, site admin privileges, etc. The security update is
still valid, however it creates an inconvenience, that is currently in
the process of being resolved.

2. For the users who have installed the RaQ3-Security-2.2 update
already, and are experiencing the mentioned symptoms, we will be
providing a fix to resolve this issue. More information will be coming
shortly as they become available.

The uninstall instructions outlined by Jeff in the previous message will
only remove the MD5 checksum, however the update will still be active on
the server. We will be making available updated corrective actions to
resolve the issue.

For the time being, the RaQ3-Security-2.2 update has been removed from
the Cobalt Security pages, and will be replaced with the proper security
update.

Thank you for your understanding.


			Raymond


Jeff Bilicki wrote:
> 
> Hello,
>     Technical Support should be posting RaQ3-Update-2.0 tomorrow. The
> text for this will read something like:
> 
> "Please make sure that the RaQ3E-Update-OS-2.0 update is installed first
> before installing RaQ3-Security-2.2. This will ensure proper integration
> of all fixes supplied by each of these updates."
> 
> This interaction only applies to RaQ 3 and has do with time frame that
> both of these updates where released in.  RaQ3E-Update-2.0 has been
> undergoing development and testing for weeks, while the Security 2.2
> didn't even exists until Friday.   To incorporate Security-2.2 into
> Update-2.0 would delay the update because it would have to complete
> another full update cycle.   We need to get both of these updates to the
> customers as soon as possible, because they both include important
> fixes.
> 
> If you have already installed RaQ3-Security-2.2 do the following when
> installing RaQ3E-Update-OS-2.0:
> 1. as root type:
> /var/lib/cobalt/uninstallers/RaQ3-Security-2.2-2.2.uninst
> 2. install RaQ3E-Update-OS-2.0
> 2. install RaQ3-Security-2.2
> 
> If you install RaQ3E-Update-OS-2.0 and do not re-install
> RaQ3-Security-2.2, it will re-introduce the security bug back into the
> system.
> 
> Jeff Bilicki
> Software Engineer
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-users

-- 

Raymond Yip
Manager - Technical Support
raymond@xxxxxxxxxx

Cobalt Networks, Inc.
http://www.cobalt.com/support/
support@xxxxxxxxxx
 
555 Ellis Street
Mountain View, CA 94043
main: 650-930-2500
fax: 650-623-2632