sendmail update

[Karsten Wade]

On Thu, Jan 21, 2010 at 11:33:58AM -0500, Sheryl Yourshaw wrote:
> Hi,
>
> I am part of a government office that uses fedora - we like linux  
> environment and need to control our limited expenditures.

Hi Sheryl,

Thanks for your kind words.  There are some easy ways to find out this
information, and I'll follow that with our usual admonition about how
to find answers and communicate with the Fedora community.

> I am writing because because we have recently received the security  
> requirement to update sendmail to version 8.14.4 by 1/25/2010. What I  
> would like to know is if there will be an update forthcoming that deals  
> with this?

There are multiple places where information and status of packages are
maintained, such as the build system (koji) and the bug reporting
(bugzilla).

There is a single interface for looking at this information, and you
don't need a Fedora account to access it (although the account is easy
to get and makes the site potentially more useful for you:)

https://admin.fedoraproject.org/community/ - Fedora Community

1. Use the "SEARCH" top-center and search on 'sendmail'
2. In the search results, choose the plain 'sendmail' package
3. This page shows you status of the package
4. One key information is that there is not an 8.14.4 showing in the
   release named "Rawhide", which are the latest packages being built for
   the next release (Fedora 13).
5. However, if you go to the "Maintenance Tools" tab, you'll see the
   top bug report is "update to 8.14.4"

That bug report is where the discussions and information about that
update are happening.

https://bugzilla.redhat.com/show_bug.cgi?id=556574

I don't see much more than the request to update to 8.14.4.  You can put
yourself on the Cc: for that bug report so you can keep track of the
status.  It is not usually useful to just leave a comment that you are
interested in the update as well, but it may carry more meaning if you
tell the package maintainer about a security requirement for the
update.  Normally the Fedora Security team is in front of needs to
update packages for security needs, and they have a good view across
the security spectrum.

http://fedoraproject.org/wiki/Security

I'm Cc:ing a member of the Fedora Security team, as I'm sure they'd
appreciate knowing (more) about security requirements for anything we
package.

FYI, in the future you can seek information and help about Fedora from
the resources listed here:

http://fedoraproject.org/wiki/Communicating_and_getting_help

The webmaster@ address is reserved for issues directly related to
Fedora Project websites (*.fedoraprojet.org etc.)

Thanks - Karsten

> Thanks for putting out a good product.
> Sheryl
>
> -- 
> *Sheryl Yourshaw*
> Email:sheryl.yourshaw at nrl.navy.mil <mailto:sheryl.yourshaw at nrl.navy.mil>
> Phone: (202)404-1946

> -- 
> websites mailing list
> websites at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/websites

-- 
name:  Karsten 'quaid' Wade, Sr. Community Gardener
team:                Red Hat Community Architecture 
uri:                  http://quaid.fedorapeople.org
gpg:                                       AD0E0C41
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/websites/attachments/20100121/3187d68a/attachment.sig>