This has been done at Fermilab. tag
lcg1_20030922_1220_CERN_LCG1-1_0_1
has been created.
Thanks,
Joe
On Fri, 2003-09-19 at 11:30, Emanuele LEONARDI wrote:
> Dear LCG1 site administrators,
>
> in the past few days a few security patches for the openssh, sendmail
> and pine packages have been released.
>
> I just finished including them in the LCG1 rpm lists and created a new
> tag named LCG1-1_0_1
>
> The only difference with tag LCG1-1_0_0 are the patched rpms so you only
> need to check out the new tag, run updarep on the LCFG server, and
> trigger a node update. Be aware that, due to the internal functioning of
> LCFG, you may have to edit the redhat73-cfg.h file adding the ":/tmp"
> string at the end of the updaterpms.rpmdir definition before running
> mkxprof.
>
> Note 1: as the pathced rpms are part of the basic operating system, ALL
> nodes need to be updated.
>
> Note 2: services should be automatically restarted by the rpm update but
> it does not hurt if you give a look and make sure this was done.
>
> Please report to lcg-rollout when you are done.
>
> Cheers
>
> Emanuele
>
> P.S. for the curious characters, this is the list of new rpms:
>
> openssh-3.1p1-14.i386.rpm
> openssh-askpass-3.1p1-14.i386.rpm
> openssh-askpass-gnome-3.1p1-14.i386.rpm
> openssh-clients-3.1p1-14.i386.rpm
> openssh-server-3.1p1-14.i386.rpm
> pine-4.44-19.73.0.i386.rpm
> sendmail-8.11.6-27.73.i386.rpm
> sendmail-cf-8.11.6-27.73.i386.rpm
> sendmail-devel-8.11.6-27.73.i386.rpm
> sendmail-doc-8.11.6-27.73.i386.rpm
>
>
>
> --
> /------------------- Emanuele Leonardi -------------------\
> | eMail: [log in to unmask] - Tel.: +41-22-7674066 |
> | IT division - Bat.31 2-012 - CERN - CH-1211 Geneva 23 |
> \---------------------------------------------------------/
--
===================================================================
Joe Kaiser - Systems Administrator
Fermi Lab
CD/OSS-SCS Never laugh at live dragons.
630-840-6444
[log in to unmask]
===================================================================
|