OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Ralf S. Engelschall
Root: /e/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-web Date: 30-Mar-2003 13:34:12
Branch: HEAD Handle: 2003033012341200
Modified files:
openpkg-web/security OpenPKG-SA-2003.027-sendmail.txt
Log:
- fix version of OpenPKG 1.2 update package in example
- nevertheless mention OpenPKG 1.1 (although no package exists)
- do not talk about upgrading dependent packages (there are none)
- reformat paragraphs with par(1)
- remove OpenPKG 1.1 URLs
Summary:
Revision Changes Path
1.3 +15 -19 openpkg-web/security/OpenPKG-SA-2003.027-sendmail.txt
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-web/security/OpenPKG-SA-2003.027-sendmail.txt
============================================================================
$ cvs diff -u -r1.2 -r1.3 OpenPKG-SA-2003.027-sendmail.txt
--- openpkg-web/security/OpenPKG-SA-2003.027-sendmail.txt 30 Mar 2003 11:27:17
-0000 1.2
+++ openpkg-web/security/OpenPKG-SA-2003.027-sendmail.txt 30 Mar 2003 11:34:12
-0000 1.3
@@ -13,6 +13,7 @@
Affected Releases: Affected Packages: Corrected Packages:
OpenPKG CURRENT <= sendmail-8.12.8-20030328 >= sendmail-8.12.9-20030329
OpenPKG 1.2 <= sendmail-8.12.7-1.2.1 >= sendmail-8.12.7-1.2.2
+OpenPKG 1.1 none N.A.
Dependent Packages: none
@@ -25,32 +26,29 @@
CAN-2003-0161 [2] to the problem.
Please check whether you are affected by running "<prefix>/bin/rpm
- -q sendmail". If you have the "sendmail" package installed and its version
- is affected (see above), we recommend that you immediately upgrade
- it (see Solution) and it's dependent packages (see above), if any,
- too. [3][4]
+ -q sendmail". If you have the "sendmail" package installed and its
+ version is affected (see above), we recommend that you immediately
+ upgrade it (see Solution) and it's dependent packages (see above), if
+ any, too. [3][4]
Solution:
Select the updated source RPM appropriate for your OpenPKG release
- [5][6], fetch it from the OpenPKG FTP service [7][8] or a mirror
- location, verify its integrity [9], build a corresponding binary RPM
- from it [3] and update your OpenPKG installation by applying the binary
- RPM [4]. For the current release OpenPKG 1.2, perform the following
- operations to permanently fix the security problem (for other releases
- adjust accordingly).
+ [5], fetch it from the OpenPKG FTP service [6] or a mirror location,
+ verify its integrity [7], build a corresponding binary RPM from it [3]
+ and update your OpenPKG installation by applying the binary RPM [4].
+ For the current release OpenPKG 1.2, perform the following operations
+ to permanently fix the security problem (for other releases adjust
+ accordingly).
$ ftp ftp.openpkg.org
ftp> bin
ftp> cd release/1.2/UPD
- ftp> get sendmail-8.12.7-1.2.1.src.rpm
+ ftp> get sendmail-8.12.7-1.2.2.src.rpm
ftp> bye
$ <prefix>/bin/rpm -v --checksig sendmail-8.12.7-1.2.2.src.rpm
$ <prefix>/bin/rpm --rebuild sendmail-8.12.7-1.2.2.src.rpm
$ su -
# <prefix>/bin/rpm -Fvh <prefix>/RPM/PKG/sendmail-8.12.7-1.2.2.*.rpm
-
- Additionally, we recommend that you rebuild and reinstall
- all dependent packages (see above), if any, too. [3][4]
________________________________________________________________________
References:
@@ -59,11 +57,9 @@
[2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0161
[3] http://www.openpkg.org/tutorial.html#regular-source
[4] http://www.openpkg.org/tutorial.html#regular-binary
- [5] ftp://ftp.openpkg.org/release/1.1/UPD/sendmail- .src.rpm
- [6] ftp://ftp.openpkg.org/release/1.2/UPD/sendmail-8.12.7-1.2.2.src.rpm
- [7] ftp://ftp.openpkg.org/release/1.1/UPD/
- [8] ftp://ftp.openpkg.org/release/1.2/UPD/
- [9] http://www.openpkg.org/security.html#signature
+ [5] ftp://ftp.openpkg.org/release/1.2/UPD/sendmail-8.12.7-1.2.2.src.rpm
+ [6] ftp://ftp.openpkg.org/release/1.2/UPD/
+ [7] http://www.openpkg.org/security.html#signature
________________________________________________________________________
For security reasons, this advisory was digitally signed with the
@@ .
______________________________________________________________________
The OpenPKG Project www.openpkg.org
CVS Repository Commit List [EMAIL PROTECTED]
