[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] IMPORTANT: Sendmail vulnrability - Sun Cobalt-specific Instructions
- Subject: [cobalt-users] IMPORTANT: Sendmail vulnrability - Sun Cobalt-specific Instructions
- From: aljuhani <aljuhani@xxxxxxxxx>
- Date: Sat Mar 8 21:44:01 2003
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
Grant,
OK I just made a typing mistake. I meant you will need to tar (backup)your
/etc/mail directory before applying the update.
Al-Juhani
aljuhani@xxxxxxxxx
>===== Original Message From cobalt-users@xxxxxxxxxxxxxxx =====
In a previous message, aljuhani typed vigorously:
>Not to fotget to upgrade your mail directory
>(sendmail.cf, access, etc) beofre applying the RPMs.
But what does this mean? Can someone explain what is involved in
"upgrading your mail directory'? This isn't mentioned anywhere on the Sun
support page as indicated below. I'll certainly back things up prior to
installing the RPM patches, but "upgrading"?
g.
====Original Message====
>Hello Grant.
>
>I have posted the URL at the bottom of my last message. Anyway, the URL is
>under Sun's Support Fourm:
>http://supportforum.sun.com/cgi-bin/WebX.cgi?13@xxxxxxxxxxxxxxx^0@.eeb7a0d
>
>and from Sendmail List, here is a command that you can you issue to check if
>your sendmail is updated.
>
>[root]# strings /usr/sbin/sendmail | grep "Dropped invalid comments"
>Dropped invalid comments from header address
>
>You should get the above output. Not to fotget to upgrade your mail
>directory
>(sendmail.cf, access, etc) beofre applying the RPMs.
>
>aljuhani@xxxxxxxxx
>
>
>====Original Message====
>In a previous message, aljuhani typed vigorously:
>
>>Instructions below are posted at sun.com regarding patching up sendmail.
>>The instructions were posted on 4th March while the pkgmaster.com package
>>is dated a day earlier (3rd of March). My Question should we use these
>>instructions and install RPMs from sun or installing pkgmaster.com
>>package is enough.
>
>Wow. I'm impressed. You were actually able to find this information on
>the Sun site. I've been looking for half and hour and can't find thing
>one. Could you please post the URL where you found this information?
>Thanks.
>
>By the way, there are RPMs for the Qube2 in:
>
>ftp://ftp-eng.cobalt.com/pub/experimental/security/sendmail/qube2/
>
>The read me is here:
>
>ftp://ftp-eng.cobalt.com/pub/experimental/security/sendmail/README.all
>
>g.
......................................................................
Grant Hutchinson
Interface Considerations & Toys
Weblog > http://www.splorp.com/
Newton > http://www.newted.org/
Design > http://www.veer.com/