Re: Fedora Legacy Test Update Notification: sendmail

2006-03-23 Thread Gene Heskett
On Thursday 23 March 2006 02:50, Jesse Keating wrote: >- >Fedora Legacy Test Update Notification >FEDORALEGACY-2006-186277 >Bugzilla https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=186277 >2006-03-22 >-

Re: Question about yum.conf for fc2

2006-03-23 Thread seth vidal
On Thu, 2006-03-23 at 07:37 -0500, Gene Heskett wrote: > Greetings; > > Yum is rather continuously erroring out on fedora extras, both branches > recently. Do I need to edit that line and send it someplace else now? you need to tell us what the error is. -sv -- fedora-legacy-list mailing l

Re: US-CERT Technical Cyber Security Alert TA06-081A -- Sendmail Race Condition Vulnerability (fwd)

2006-03-23 Thread Jesse Keating
On Thu, 2006-03-23 at 07:33 -0500, G. Roderick Singleton wrote: > Patch? Why patch when one can build the new release using a spec file? > It works for me. Because we want to impact how the system works as little as possible. Usually this means backporting patches into existing packages as to not

Re: US-CERT Technical Cyber Security Alert TA06-081A -- Sendmail Race Condition Vulnerability (fwd)

2006-03-23 Thread Kenneth Porter
--On Wednesday, March 22, 2006 6:46 PM -0700 Michal Jaegermann <[EMAIL PROTECTED]> wrote: So, it is clear that those with older distros will have to do, if required, a sendmail version bump. I don't mind pulling the latest rawhide version, if the dependencies aren't too bad. Has anyone built

Re: My personal patch for sendmail 8.12.8 on RedHat 9

2006-03-23 Thread Adam Gibson
Adam Gibson wrote: ... This has been working since yesterday around 4pm EST on a medium load server without issues. The offical 8.12.11 patch which does not apply properly on 8.12.8 is on the main sendmail.org site for reference. Anyone here any new news about an official legacy patch? Ign

Question about yum.conf for fc2

2006-03-23 Thread Gene Heskett
Greetings; Yum is rather continuously erroring out on fedora extras, both branches recently. Do I need to edit that line and send it someplace else now? -- Cheers, Gene People having trouble with vz bouncing email to me should add the word 'online' between the 'verizon', and the dot which bypa

Re: US-CERT Technical Cyber Security Alert TA06-081A -- Sendmail Race Condition Vulnerability (fwd)

2006-03-23 Thread G. Roderick Singleton
On Wed, 2006-03-22 at 14:43 -0800, Jesse Keating wrote: > On Wednesday 22 March 2006 10:29, Kenneth Porter wrote: > > For those of us accepting mail from outside on pre-FC4 Fedora, are any > > updates in the pipe to address this? > > We are working on some fixed packages. > Patch? Why patch when

Re: US-CERT Technical Cyber Security Alert TA06-081A -- Sendmail Race Condition Vulnerability (fwd)

2006-03-23 Thread Marc Deslauriers
On Wed, 2006-03-22 at 10:29 -0800, Kenneth Porter wrote: > For those of us accepting mail from outside on pre-FC4 Fedora, are any > updates in the pipe to address this? Packages have been created and QA'd. They will be pushed to updates-testing soon. You may follow progress here: https://bugzil

Fedora Legacy Test Update Notification: sendmail

2006-03-23 Thread Jesse Keating
- Fedora Legacy Test Update Notification FEDORALEGACY-2006-186277 Bugzilla https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=186277 2006-03-22 - Name:

[FLEA-2006:173091-2] Updated tzdata package adds daylight savings rule enhancements

2006-03-23 Thread Marc Deslauriers
- Fedora Legacy Update Advisory Synopsis: Updated tzdata package adds daylight savings rule enhancements Advisory ID: FLEA:173091-2 Issue date:2006-03-23 Product:

[FLEA-2006:173091-1] Updated glibc packages add daylight savings rule enhancements

2006-03-23 Thread Marc Deslauriers
- Fedora Legacy Update Advisory Synopsis: Updated glibc packages add daylight savings rule enhancements Advisory ID: FLEA:173091-1 Issue date:2006-03-23 Product: R

[FLEA-2006:173091-2] Updated tzdata package adds daylight savings rule enhancements

2006-03-23 Thread Marc Deslauriers
- Fedora Legacy Update Advisory Synopsis: Updated tzdata package adds daylight savings rule enhancements Advisory ID: FLEA:173091-2 Issue date:2006-03-23 Product:

[FLEA-2006:173091-1] Updated glibc packages add daylight savings rule enhancements

2006-03-23 Thread Marc Deslauriers
- Fedora Legacy Update Advisory Synopsis: Updated glibc packages add daylight savings rule enhancements Advisory ID: FLEA:173091-1 Issue date:2006-03-23 Product: R

Re: US-CERT Technical Cyber Security Alert TA06-081A -- Sendmail Race Condition Vulnerability (fwd)

2006-03-23 Thread Michal Jaegermann
On Wed, Mar 22, 2006 at 10:29:27AM -0800, Kenneth Porter wrote: > > For those of us accepting mail from outside on pre-FC4 Fedora, are any > updates in the pipe to address this? I should add that in sendmail.org annoucement, http://lwn.net/Articles/176595/, there is the following: "However, not

Re: 1-2-3 out, time for FC2?

2006-03-23 Thread Eric Rostetter
Quoting "Nils Breunese (Lemonbit Internet)" <[EMAIL PROTECTED]>: I just think it would be interesting (for Fedora Legacy) to have some sort of idea of why people are running legacy versions of Red Hat and Fedora, so FL knows 'who they are doing it for'. I'm doing it for the classic reason: I

Re: Fedora Legacy Update : kdelibs dependency problems

2006-03-23 Thread David Eisenstein
A E Lawrence wrote: >> Synopsis: Updated kdelibs packages fix security issues >> Advisory ID: FLSA:178606 > > download.fedoralegacy.org/fedora/3/updates/x86_64/kdelibs-3.4.2-1.fc3.1.legacy.x86_64.rpm > > > Trying to update (yum) the kdelibs and kdelibs-devel rpms fails on a > AMD6

Re: US-CERT Technical Cyber Security Alert TA06-081A -- Sendmail Race Condition Vulnerability (fwd)

2006-03-23 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kenneth Porter wrote: > Main alert page: > > Fedora details: > >> From the summary: > > > A race condition in Sendmail may allow a remote attacker to execute >

sendmail remote vulnerability

2006-03-23 Thread Pekka Savola
Hi, I hope FL core has had preliminary warning of the just-released sendmail remote vulnerability and if something has already been done about it, even better.. -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems.

Re: US-CERT Technical Cyber Security Alert TA06-081A -- Sendmail Race Condition Vulnerability (fwd)

2006-03-23 Thread Michal Jaegermann
On Wed, Mar 22, 2006 at 10:29:27AM -0800, Kenneth Porter wrote: > Main alert page: > > Fedora details: > > >From the summary: > > A race condition in Sendmail may allow a remote attacker to execute > arbitra

Re: US-CERT Technical Cyber Security Alert TA06-081A -- Sendmail Race Condition Vulnerability (fwd)

2006-03-23 Thread Jeff Sheltren
On Mar 22, 2006, at 2:29 PM, Kenneth Porter wrote: Main alert page: Fedora details: From the summary: A race condition in Sendmail may allow a remote attacker to execute arbitrary code. For those of us

Re: US-CERT Technical Cyber Security Alert TA06-081A -- Sendmail Race Condition Vulnerability (fwd)

2006-03-23 Thread Stephen J. Smoogen
On 3/22/06, Kenneth Porter <[EMAIL PROTECTED]> wrote: > Main alert page: > > Fedora details: > > >From the summary: > >A race condition in Sendmail may allow a remote attacker to execute >arbitrary code. >

Re: Fedora Legacy Update : kdelibs dependency problems

2006-03-23 Thread Michal Jaegermann
On Wed, Mar 22, 2006 at 06:54:03PM +, A E Lawrence wrote: > > Synopsis: Updated kdelibs packages fix security issues > > Advisory ID: FLSA:178606 > > download.fedoralegacy.org/fedora/3/updates/x86_64/kdelibs-3.4.2-1.fc3.1.legacy.x86_64.rpm > > Trying to update (yum) the kdelibs

Re: Fedora Legacy Update : kdelibs dependency problems

2006-03-23 Thread Nils Breunese (Lemonbit Internet)
A E Lawrence wrote: Trying to update (yum) the kdelibs and kdelibs-devel rpms fails on a AMD64 FC3 legacy system because all the other kde packages appear to require kdebase-3.3.1-4.3.FC3. I can't see anyone else reporting this problem in the archives of this list, so I am mystified. I su

Re: US-CERT Technical Cyber Security Alert TA06-081A -- Sendmail Race Condition Vulnerability (fwd)

2006-03-23 Thread Jesse Keating
On Wednesday 22 March 2006 10:29, Kenneth Porter wrote: > For those of us accepting mail from outside on pre-FC4 Fedora, are any > updates in the pipe to address this? We are working on some fixed packages. -- Jesse Keating RHCE (geek.j2solutions.net) Fedora Legacy Team (www.fedoralega