Re: [cobalt-users] RPMS from Sun for sendmail vulnerability

[Goetz Lohmann <goetz.lohmann@xxxxxx>]

Bruce Timberlake schrieb:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>  
>
>>if they work on a new sendmail pkg why they still use the 8.10
>>version ? the 8.12 version is out since a long time the 8.11 even
>>longer ...
>>    
>>
>
>For compatability with existing code etc on the box, and for easier QA 
>testing.  Easier to just patch a "known good" codebase and run a 
>quick regression test than to jump up a whole new version and force 
>complete testing of all features, etc.
>
Yes ... thats sure a point ... but I think If they touch the files and
do a patch ... it's just
unnessecary more work to get it with a sendmail upgrade (which enables
Milter as
an example ) for them as for anybody out there like PkgMaster or SolarSpeed.
Cause they have all the neccessary insider info, docs, sources by the
hand ...

>That's why "Cobalt PHP" is still 4.0.6 but has all the security 
>patches of the newer versions, "Cobalt Apache" is 1.3.20 but has been 
>patched, etc.
>
>Makes it confusing if you just look at the RPM rev number and can't 
>see the changelog info on what's been done (I really wish that info 
>was public!), and does deny features in the newer version, but from a 
>maintenance point of view it's easier.
>
I do not just looking at revision numbers ... but sendmail changed a lot
under the hood
since 8.10 like the milter support which is very important if you wish
to get amavis
running right ...

They even have to test the new patch, if it is a complete upgrade or
just a patch ...
and a lot of us where happy to see the 8.12 out from Cobalt-Sun. PHP by
the way
is much easier to compile than sendmail.

>Remember, these are appliances and you're not supposed to care or need 
>to worry about what's "under the hood" -- if it does what the UI says 
>it will do, that's all you've been "promised"... ;)
>
*grin* ... yes ... It's just that I love to get the extra bit like a lot
other here on the board.

I do not expect anything at all ... and since RaQ4 is EOL ... I just
mentioned and were
glad if there might be a sendmail 8.12 pkg somewhere in the future (but
I gues not)

so long ... ;-)

>- -- 
>Bruce Timberlake
>  
>
regards

-- 

¸,ø¤°`°¤ø,¸_¸,ø¤°`°¤ø,¸_¸,ø¤°°¤ø,¸_¸,ø¤°`°¤ø,¸_¸,ø¤°°¤ø,¸

Götz Lohmann  |  D-Mannheim  |  Web-Developer & Sys-Admin
---------------------------------------------------------
He's the fellow that people wonder what he does and why
the company needs him, until he goes on vacation.
¸,ø¤°`°¤ø,¸_¸,ø¤°`°¤ø,¸_¸,ø¤°°¤ø,¸_¸,ø¤°`°¤ø,¸_¸,ø¤°°¤ø,¸