Re: [cobalt-security] [SECURITY WARNING] All Neomail users

["Jonathan M. Slivko" <js43064n@xxxxxxxx>]

Did you uninstall the previous NeoMail? If you didn't, that may be why. --
Jonathan

----- Original Message -----
From: "Patrick Agee" <pagee@xxxxxxxxxxxxxx>
To: <cobalt-security@xxxxxxxxxxxxxxx>
Cc: <taco.scargo@xxxxxxx>
Sent: Wednesday, November 14, 2001 5:42 PM
Subject: RE: [cobalt-security] [SECURITY WARNING] All Neomail users


> Ok,
>
> RaQ2 with all current patches installed and had Neomail 1.25-3 installed
> and had been operating ok. Downloaded new 1.25-4 to my pc and also wget to
> server. Tried to install from command line and got following error.
>
> 402 Alternate version (1.25-3) of  Neomail  detected trying to install
> version (1.25-4).
>
>
> Checked web interface and old version 1.25-3 still showing. Tried
> installing from web interface and it worked, now showing version of
1.25-4.
> Not sure of the reason, just wanted to let those trying know.
>
> Patrick Agee
> pagee@xxxxxxxxxxxxxx
>
>
>
> -----Original Message-----
> From: cobalt-security-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-security-admin@xxxxxxxxxxxxxxx]On Behalf Of Taco Scargo
> Sent: Wednesday, November 14, 2001 17:01
> To: cobalt-security@xxxxxxxxxxxxxxx
> Cc: Jeff Lovell
> Subject: [cobalt-security] [SECURITY WARNING] All Neomail users
> Importance: High
>
>
> Dear Neomail users,
>
> Earlier today I was informed that installation of the Neomail package that
> I
> created and published on http://pkg.nl.cobalt.com contains code that opens
> up a potential security threat. After close investigation I have now
> prepared an updated version (1.25-4) that does not contain this security
> threat anymore and closes the one that was created by installing any of
the
> prior versions (1.25-1 to 1.25-3). I therefore advise all Neomail package
> users to install the update as soon as possible.Additionally I also fixed
a
> problem that occurred when forwarding messages with attachments.
>
> Although this package has not received the proper testing it should have
> had, I believe (due to the nature of the changes) the update will not
cause
> any problems, and Neomail will keep working properly.
>
> The update can be applied over any previous version, but also as a fresh
> install. As always: please be reminded that this software is provided
as-is
> without warranty and support. Please read the disclaimer (About this site)
> on http://pkg.nl.cobalt.com closely before installing any software from
> this
> website.
>
> With regards,
>
> Taco Scargo
> Professional Services Manager, EMEA
>
> Sun Microsystems
> Sun Cobalt Server Appliances
>
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
>
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
>