Re: Security Errata not covering all versions of RHEL packages

On Wed, Apr 2, 2008 at 11:29 AM, inode0 <[email protected]> wrote:

> I've run across this situation a few times in the past and again this
> morning.
>
> https://rhn.redhat.com/errata/RHSA-2008-0197.html was released this
> morning and fixes a security issue in the version of the package in
> the base channel (gnome-screensaver-2.16.1-5.el5_1.1 is the new fixed
> version) but in the fastrack channel there exists version 2.16.1-6
> which does not have an errata at this time.
>
> The changelog for the fastrack package suggests nothing about this
> errata so I'm again asking for some mechanism to be found whereby
> users who are concerned about security can determine whether a package
> such as this is vulnerable or not. If it is known to be not vulnerable
> please include this information in the released errata.
>
> And if someone could tell me whether or not it is vulnerable that
> would be swell too for this case.
>
> Thanks,
> John
>
> _______________________________________________
> rhn-users mailing list
> [email protected]
> https://www.redhat.com/mailman/listinfo/rhn-users
>


you might consider opening a ticket and asking Red Hat.
if you have a current subscription, this support is included.

_______________________________________________
rhn-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/rhn-users