Security Errata not covering all versions of RHEL packages
inode0 <[email protected]>
| Newsgroups | gmane.linux.redhat.rhn.user |
|---|---|
| Message-ID | <[email protected]> |
I've run across this situation a few times in the past and again this morning. https://rhn.redhat.com/errata/RHSA-2008-0197.html was released this morning and fixes a security issue in the version of the package in the base channel (gnome-screensaver-2.16.1-5.el5_1.1 is the new fixed version) but in the fastrack channel there exists version 2.16.1-6 which does not have an errata at this time. The changelog for the fastrack package suggests nothing about this errata so I'm again asking for some mechanism to be found whereby users who are concerned about security can determine whether a package such as this is vulnerable or not. If it is known to be not vulnerable please include this information in the released errata. And if someone could tell me whether or not it is vulnerable that would be swell too for this case. Thanks, John