Re: [ossig] Linux Security

[Colin Charles <byte@xxxxxxxxxxx>]

On Tue, 2004-02-24 at 16:49, Yeak Nai Siew wrote:

> 3. To prevent that, the only solution I found so far is to keep 
> updating the OS to the latest patches. However, as you know Red Hat has 
> discontinued 7.3 and 8.0 updates, there won't be any new updates to 
> address future Apache loopholes. Red Hat Linux 9 will not getting any 
> more updates after 2004. Upgrades? Red Hat recommend change to Red Hat 
> Enterprise Linux. Otherwise we have to compile our own program from 
> sources (get from RHEL sources and study how it is made, and compile 
> yours).

The Fedora Legacy project aims to solve this -
http://www.fedoralegacy.org/

If you feel like getting commercial backing, Progeny sells support. In
fact, the legacy project does get help from RH staff to a certain
degree.

With regards to the security exploit, no response from me, since I
didn't quite read it. Have you posted this "issue" elsewhere? Bugtraq,
etc... Or is it a known Apache problem?
-- 
Colin Charles, byte@aeon.com.my
http://www.bytebot.net/
http://fedoranews.org/colin/fnu/ - Fedora News Updates


---------------------------------------------------------
To unsubscribe: send mail to ossig-request@mncc.com.my
with "unsubscribe ossig" in the body of the message