RE: RE: rhn-users Digest, Vol 36, Issue 5

Yes....

regards

Steven Jones
Senior  Linux/Unix/San System Administrator
APG -Technology Integration Team
Victoria University of Wellington
Phone: +64 4 463 6272 Mobile: +64 27 563 6272 

 


-----Original Message-----
From: rhn-users-bouncesredhat.com [mailto:rhn-users-bouncesredhat.com]
On Behalf Of inode0
Sent: Thursday, 8 February 2007 10:20 a.m.
To: Discussions about Red Hat Network (rhn.redhat.com)
Subject: Re: [rhn-users] RE: rhn-users Digest, Vol 36, Issue
5

On 2/7/07, Steven Jones <Steven.Jonesvuw.ac.nz> wrote:
> I have a mailman rpm with a bug fixed by mailman in
2005, yet it is
not
> in the rhas3 yet.....indeed support tells me it may
never be put in so
I
> have to patch it from the mailman tree....kinda blows
away the reason
> for getting rhas in the first place when I start to
roll my own
> solutions...........

Security fixes and other bug fixes are naturally treated
differently.
Is your mailman issue something that leaves your system or
service
vulnerable to attack?

RHEL3 is in deployment support now so I would think Red Hat
would
still fix bugs that aren't security related unless they are
of very
little consequence.

John

_______________________________________________
rhn-users mailing list
rhn-usersredhat.com
htt
ps://www.redhat.com/mailman/listinfo/rhn-users

_______________________________________________
rhn-users mailing list
rhn-usersredhat.com
htt
ps://www.redhat.com/mailman/listinfo/rhn-users

On 2/7/07, Steven Jones <Steven.Jonesvuw.ac.nz> wrote:
> Yes....

Do you have a CVE for the issue? Since I have users also
using mailman
I'd be interested in details so I can investigate and also
raise my
concerns with Red Hat if this package has an unaddressed
vulnerability.

Thanks,
John

_______________________________________________
rhn-users mailing list
rhn-usersredhat.com
htt
ps://www.redhat.com/mailman/listinfo/rhn-users

On 2/7/07, inode0 <inode0gmail.com> wrote:
> On 2/7/07, Steven Jones <Steven.Jonesvuw.ac.nz> wrote:
> > Yes....
>
> Do you have a CVE for the issue? Since I have users
also using mailman
> I'd be interested in details so I can investigate and
also raise my
> concerns with Red Hat if this package has an
unaddressed
> vulnerability.

Just so no one is left with the wrong impression about this,
I feel I
should report that I have not received a CVE or any other
evidence of
known vulnerabilities that Red Hat has not responded to so
far.

John

_______________________________________________
rhn-users mailing list
rhn-usersredhat.com
htt
ps://www.redhat.com/mailman/listinfo/rhn-users