[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-security] [SECURITY WARNING] All Neomail users



Ok,

	RaQ2 with all current patches installed and had Neomail 1.25-3 installed
and had been operating ok. Downloaded new 1.25-4 to my pc and also wget to
server. Tried to install from command line and got following error.

402 Alternate version (1.25-3) of  Neomail  detected trying to install
version (1.25-4).


	Checked web interface and old version 1.25-3 still showing. Tried
installing from web interface and it worked, now showing version of 1.25-4.
Not sure of the reason, just wanted to let those trying know.

Patrick Agee
pagee@xxxxxxxxxxxxxx



-----Original Message-----
From: cobalt-security-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx]On Behalf Of Taco Scargo
Sent: Wednesday, November 14, 2001 17:01
To: cobalt-security@xxxxxxxxxxxxxxx
Cc: Jeff Lovell
Subject: [cobalt-security] [SECURITY WARNING] All Neomail users
Importance: High


Dear Neomail users,

Earlier today I was informed that installation of the Neomail package that
I
created and published on http://pkg.nl.cobalt.com contains code that opens
up a potential security threat. After close investigation I have now
prepared an updated version (1.25-4) that does not contain this security
threat anymore and closes the one that was created by installing any of the
prior versions (1.25-1 to 1.25-3). I therefore advise all Neomail package
users to install the update as soon as possible.Additionally I also fixed a
problem that occurred when forwarding messages with attachments.

Although this package has not received the proper testing it should have
had, I believe (due to the nature of the changes) the update will not cause
any problems, and Neomail will keep working properly.

The update can be applied over any previous version, but also as a fresh
install. As always: please be reminded that this software is provided as-is
without warranty and support. Please read the disclaimer (About this site)
on http://pkg.nl.cobalt.com closely before installing any software from
this
website.

With regards,

Taco Scargo
Professional Services Manager, EMEA

Sun Microsystems
Sun Cobalt Server Appliances

_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security