Re: [cobalt-users] New Exploit for Sendmail

[Bruce Timberlake <bruce@xxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> > This just came across...what has been everyone's past experience
> > using the Sendmail patches on the Raq3 & Raq4 vs. waiting for
> > Cobalt / Sun to release a patch (if at all ?)

I have no idea when/if a patch will come out for this problem.  For an 
"official" patch, there's a QA process involved, which will take a 
day or so at minimum, potentially much longer.

> Would the RaQ4 package work on a RaQ3? I didn't think there was
> that great a difference in the OSs.

Depends on if the PKG is written to work on a RaQ 3 (there's a 
different ID file on each box - /etc/build - so that PKGs can know if 
they should install or not). I don't think there's enough difference 
in the 2 to matter, as long as the PKG will install on either OS.

BTW, www.solarspeed.net has a free Sendmail update PKG already 
available. I put it on my RaQ 4r, and it works fine.  Note that 
future Sun upgrades may not work properly if that's installed, so 
beware.  The Solarspeed PKG is fully uninstallable, though, so 
when/if a Sun patch does come out, you can roll back the Solarspeed 
patch and install the Sun version, to maintain future compatibility.

- -- 
Bruce Timberlake

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+Y9ILvLA2hUZ9kgwRAhEPAJ0cfkw1tpvvf9hP8+sEv1+zA4fcJACggCOG
6zkZoUT9mcCop7iICE6wWbU=
=cnxJ
-----END PGP SIGNATURE-----