Re: [cobalt-users] sendmail on RaQ2

[Jay Summers <jay@xxxxxxxxxxxxxxxxxxxxx>]

On Tuesday, March 4, 2003, at 10:52  AM, agility wrote:

> > Is there a fix page on the RaQ and RaQ2 dealing with recent
> > exploits (not limited to sendmail).
> > Thanks
> > Bill
> Ditto from another RAQ2 owner.

Don't know if you saw this on the Cobalt-Security list, but here's a 
quote from Harald Kapper's email earlier today.

<quote>
as I maintain a whole bunch of raq2-boxes, I've setup a patched 8.11.6 
here
http://www.knet.at/~hk/raq2/

please do only modify your system if you know what you're doing, 
otherwise
instruct some professional to do it for you - honestly - this saves 
time + money.

it's 8.11.6 because some features faded out in 8.12 that the raq2 still
relays on (I guess I remember auto-reloadling alias-files as one of 
these).

the 8.11.6 located at the above url was originally built 2001 - so it is
hardened and tested on our raq2-setups, the patch was applied this 
morning (CET)
and the executable was recompiled then and deployed - so far our 
systems work.

this of course makes no warranty that it will work for you.
</quote>

I can verify that this new binary works well on my 3 raq2's. Follow the 
instructions at the link provided above and you should be good to go. 
YMMV. Thanks Harald.

HTH,
j