Re: [cobalt-users] RPMS from Sun for sendmail vulnerability

[Bruce Timberlake <bruce@xxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> if they work on a new sendmail pkg why they still use the 8.10
> version ? the 8.12 version is out since a long time the 8.11 even
> longer ...

For compatability with existing code etc on the box, and for easier QA 
testing.  Easier to just patch a "known good" codebase and run a 
quick regression test than to jump up a whole new version and force 
complete testing of all features, etc.

That's why "Cobalt PHP" is still 4.0.6 but has all the security 
patches of the newer versions, "Cobalt Apache" is 1.3.20 but has been 
patched, etc.

Makes it confusing if you just look at the RPM rev number and can't 
see the changelog info on what's been done (I really wish that info 
was public!), and does deny features in the newer version, but from a 
maintenance point of view it's easier.

Remember, these are appliances and you're not supposed to care or need 
to worry about what's "under the hood" -- if it does what the UI says 
it will do, that's all you've been "promised"... ;)

- -- 
Bruce Timberlake

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+Zl4tvLA2hUZ9kgwRAmEjAJ0bXW3amlzkRKOW8vxUzlYQEDZIZwCfffNg
c6rM86l1i0oXHMvYitT04vs=
=rDGj
-----END PGP SIGNATURE-----