[linux-security] Re: [RHSA-1999:029-01] Denial of service attack in in.telnetd

[R E Wolff BitWizard nl (Rogier Wolff)]

Dan Stromberg wrote:
> 
> Is redhat 5.1 immune to the attack?  Or is it no longer supported for
> patches?  It seems strange that both 4.2 and 5.2 are vulnerable, but

You're allowed to lag one major behind. So while red Hat is releasing
6.0, 6.1, 6.2 etc, you're allowed to stay on 5.2. If you're on 5.1 or
5.0 you should always upgrade to 5.2. No way around it. That's what
they told me about a year ago.

The 5.x -> 5.2 upgrade is supposed to be relatively painless. If you
REALLY know what you're doing, you could only upgrade the essential
parts. (i.e. the packages that had security issues).

			Roger. 

-- 
** R E Wolff BitWizard nl ** http://www.BitWizard.nl/ ** +31-15-2137555 **
*-- BitWizard writes Linux device drivers for any device you may have! --*
------ Microsoft SELLS you Windows, Linux GIVES you the whole house ------