At 10:51 AM 8/8/00 -0500, Jim Roland wrote:
>RedHat, just like any other distribution is a collection of tools and
>software, along with some customizations to scripts, etc. You can always
>download the latest version in rpm format and install it, just make sure to
>read the README or INSTALL files included with any of the rpms or tar
>files, to make sure you don't need extra stuff. RedHat is fairly stable,
>so it's doubtful you will need anything extra, but always read the READMEs.
Jim --
This isn't *quite* correct. Like any (competently done) Linux distribution,
RH regularly releases updates to specific packages that reflect, mostly,
security fixes. Just downloading the "latest version" won't get these; you
have do download them from the "updates" directory.
For example, RH 6.2 provides the 2.6.0-3 version of wu-ftpd in the
distribution directory, such as
ftp://metalab.unc.edu/pub/Linux/distributions/redhat/redhat-6.2/i386/RedHat/
RPMS/
OTOH, it provides the 2.6.0-14.6 update of wu-ftpd (dated June 23) in the
"updates" directory, such as
ftp://metalab.unc.edu/pub/Linux/distributions/redhat/updates/6.2/i386/
Going back to Jesse's original question, it is clear that he has been doing
his homework here, since he has the current RH update version. And I too
find that a 2.6.1 update isn't yet available from RH. Nor do I know the
answer to his actual question, whether the 2.6.0-14.6 version is vulnerable
to the latest wu-ftpd bug.
If the wu-ftld site doesn't tell you, I'd try to find the bugtraq archives
and search them.
--
------------------------------------"Never tell me the odds!"---
Ray Olszewski -- Han Solo
Palo Alto, CA [EMAIL PROTECTED]
----------------------------------------------------------------
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.linux-learn.org/faqs
