> I didn't notice anyone announcing the 4.1.2 package - is it a
> "production-grade" release already?
>
> If so, then are there any precautions, tips, caveats etc.?
> Does the update set mentioned by Dan bring 4.1.1 to 4.1.2 level, or is it
> better to do a backup to desktop, a fresh 4.1.2 install and a restore?
>
This announcement appeared on e-smith.org on April 19. Note that the update
set fixes security flaws in 4.1.1 but does not bring 4.1.1 to 4.1.2 level:
e-smith, inc. is pleased to announce the availability of the e-smith server
and gateway version 4.1.2. Version 4.1.2 is a security update to the 4.1.1
package and also contains several new features and corrections. These
security updates have been released as a result of an ongoing review of the
e-smith configuration, and in response to external security advisories.
e-smith, inc. advises all users of e-smith 4.1.1 to upgrade to e-smith
4.1.2. As an interim measure, we are also making available today a set of
update patches to secure existing 4.1.1 servers pending an upgrade to 4.1.2.
Versions prior to 4.1 are not vulnerable to the PPTP and NT password
problems described in the release notes, but are vulnerable to a remote root
compromise via an NTP vulnerability. We advise all users of earlier e-smith
releases to upgrade to 4.1.2.
Version 4.1.2 is available as an uncompressed ISO image from:
ftp://ftp.e-smith.org/pub/e-smith/e-smith-4.1.2/iso/
For details, please see the release notes at:
ftp://ftp.e-smith.org/pub/e-smith/e-smith-4.1.2/iso/RELEASE-NOTES
To install the 4.1.1 patches pending an upgrade to 4.1.2, follow the
instructions at:
ftp://ftp.e-smith.org/pub/e-smith/e-smith-4.1.2/4.1.1_updates
Ross Laver [EMAIL PROTECTED]
http://www.e-smith.com (corporate) http://www.e-smith.org (development)
Tel: +1 (613) 368 4384 or 564 8000 Fax: +1 (613) 564 7739
e-smith, inc. 1500-150 Metcalfe St, Ottawa, ON K2P 1P1 Canada
