Hi Margaret, On Fri, 5 Oct 2001, Margaret Doll wrote: > > Dear group, > > Recently I received notification that sendmail should be > upgraded to 8.12.1 and ssh to 2.9.9 because of known vulnerabilities. > When will these packages be available for RH 7.1?
The sendmail-8.11.6 RPMs fix that sendmail exploit. No openssh update as of yet (maybe they're still testing it?). There are 2 publically-known vulnerabilities at the moment - both of which are non-trivial to exploit (they require DSA/RSA based authentication to be used, as well as other pre-conditions). David. _______________________________________________ Seawolf-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/seawolf-list
