[cobalt-security] New Sendmail vulnerability :o(

[Barbara <thebizworkers@xxxxxxxxx>]

Michael,

I just installed (or I think I did) you latest
sendmail patch, but I'm not sure if it went in or
not.. The box is a fairly standard RaQ4 -but I do have
your Qpopper 4.0.5 as well as your previous Sendmail
patch installed. When I tried to install this one, it
asked me if I wanted to upgrade from the first version
-I answered yes, but then once it went through the
install process it came back with the following at the
bottom of the screen:

! stalling the original Sendmail RPM from the Sun
Cobalt FTP server:

I did a rpm -qa to see which RPM is installed on the
box and that shows this RPM:

sendmail-8.10.2-C1sol1

I then checked under 

/var/lib/cobalt/

and 

/var/lib/cobalt/uninstallers/

and I don't see your sendmail patch anywhere.. nor is
it showing up in the GUI.. 

What happened..? I'm not sure which version I've got
running at the moment.. Did it roll back sendmail and
install a RPM from Cobalt's site or is it running your
newly patched version..?  I'm a bit lost..  :-)

Thanks for your help..

Barbara

__________________________________________________
Do you Yahoo!?
Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop!
http://platinum.yahoo.com