Hold on a second... You wait for RedHat to provide a package update?
If security is paramount (in most cases it is), then why not hand roll your own binaries? I've had CERT advisories come down, check the vender site (no patch available yet they say), I download the source and build my own. Most of the vulnerabilities are in the products you run. SSH, SSL, Apache had a couple and so on. Sure packages are easier. If you have alot of systems to upgrade then read the RPM HOWTO, build your own package and push it out. Very easy. Regards --- Since Red Hat has announced an effective end-of-life of Dec 31, 2003 for > 8.0, they have forced themselves to release early. If they wait until 6 > months after October - which would be March - they've forced all the > customers into a corner. An OS install of the latest version (8.0 in > March) would only be supported for 9 months. I realize they want to > sell Advanced Server, but this is IMHO blackmail. As a business user of > Red Hat Linux, I'm going to have to seriously consider retiring Red Hat > Linux since I can't go without security updates 9 months after an > install. I've still got mostly 6.2 systems in production and I can't > upgrade all my systems every 6-9 months. It just is not going to > happen - the manpower simply isn't there. -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list