RE: [cobalt-security] Security Hardening Update 2.0.1 MAJOR FLAW!!!!!! ACTION REQUIRED!

[Paul Jacobs <paul@xxxxxxxxxxxxxxxxxx>]

At 04:56 PM 8/15/2002, you wrote:


> +-----Original Message-----
> +From: cobalt-security-admin@xxxxxxxxxxxxxxx
> +[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx]On Behalf Of Paul Jacobs
> +Sent: Thursday, August 15, 2002 3:57 PM
> +To: cobalt-security@xxxxxxxxxxxxxxx
> +Subject: Re: [cobalt-security] Security Hardening Update 2.0.1 MAJOR
> +FLAW!!!!!! ACTION REQUIRED!
> +
> +
> +At 01:52 PM 8/15/2002, you wrote:
> +
> +> > You know I may be missing something, but I don't see the
> +un-install file
> +> > for this patch.
> +>
> +>you don't want to do that... just turn it off for now.
> +
> +Why would I not want to un-install a patch?, what do you know?
>
> Because it's more of "Service Pack" instead of a patch.
>
> It does not keep rollbacks of:
>
> apache-1.3.20-RaQ4_1C3stackguard.i386.rpm
> apache-admsrv-1.3.20-RaQ4_1C3stackguard.i386.rpm
> apache-devel-1.3.20-RaQ4_1C3stackguard.i386.rpm
> apache-mod_perl-1.3.20-RaQ4_1C3stackguard.i386.rpm
> apache-openssl-1.3.20-RaQ4_1C3stackguard.i386.rpm
> base-scandetection-misc-1.0-25.i386.rpm
> bind-8.2.3-C5stackguard.i386.rpm
> bind-devel-8.2.3-C5stackguard.i386.rpm
> 06:37 bind-utils-8.2.3-C5stackguard.i386.rpm
> 12 06:38 cobalt-locale_en-4.4-RaQ4.i386.rpm
> fwall-kernel-1.8_2.2.16C32_III-4.i386.rpm
> imap-4.7c2-C4stackguard.i386.rpm
> imap-devel-4.7c2-C4stackguard.i386.rpm
> pafmgr-1.2-2.i386.rpm
> proftpd-1.2.4-stackguardC4.i386.rpm
> qpopper-3.0.2-C6stackguard.i386.rpm
> sendmail-8.10.2-C1stackguard.i386.rpm
> sgalertd-1.0-24.i386.rpm
> telnet-0.17-18C2stackguard.i386.rpm
> telnet-server-0.17-18C2stackguard.i386.rpm
> ui-3100raq-9.3-2.noarch.rpm
>
> Tony

Ok, I understand it does not keep backups. But if this is a service pack 
they really screwed up.


> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security