Dear LCG1 site administrators,
in the past few days a few security patches for the openssh, sendmail
and pine packages have been released.
I just finished including them in the LCG1 rpm lists and created a new
tag named LCG1-1_0_1
The only difference with tag LCG1-1_0_0 are the patched rpms so you only
need to check out the new tag, run updarep on the LCFG server, and
trigger a node update. Be aware that, due to the internal functioning of
LCFG, you may have to edit the redhat73-cfg.h file adding the ":/tmp"
string at the end of the updaterpms.rpmdir definition before running
mkxprof.
Note 1: as the pathced rpms are part of the basic operating system, ALL
nodes need to be updated.
Note 2: services should be automatically restarted by the rpm update but
it does not hurt if you give a look and make sure this was done.
Please report to lcg-rollout when you are done.
Cheers
Emanuele
P.S. for the curious characters, this is the list of new rpms:
openssh-3.1p1-14.i386.rpm
openssh-askpass-3.1p1-14.i386.rpm
openssh-askpass-gnome-3.1p1-14.i386.rpm
openssh-clients-3.1p1-14.i386.rpm
openssh-server-3.1p1-14.i386.rpm
pine-4.44-19.73.0.i386.rpm
sendmail-8.11.6-27.73.i386.rpm
sendmail-cf-8.11.6-27.73.i386.rpm
sendmail-devel-8.11.6-27.73.i386.rpm
sendmail-doc-8.11.6-27.73.i386.rpm
--
/------------------- Emanuele Leonardi -------------------\
| eMail: [log in to unmask] - Tel.: +41-22-7674066 |
| IT division - Bat.31 2-012 - CERN - CH-1211 Geneva 23 |
\---------------------------------------------------------/
|