In regard to: Re: [Networker] legacy clients, George Raetzke said (at...:

7.2.2 supposedly has the fix for the very nasty security

vulnerability

in nsrexecd that EMC sort of "stealth announced" on their new support

site

(which I hate).  It bothers me that the fixed bugs list for 7.2.2

doesn't

mention the particular LGTpa id that corresponds with the security
vulnerability, but according to the product alert, the fix is included

in

7.2.2.

I opened a support ticket on that one because they didn't patch the
netware client to 7.2.2 yet... they are checking on that issue, but they
did tell me the LGT number was LGTpa83642.

Thanks for doing that!  We've been wondering about the NetWare client too.
We're still using the 4.22 client, since so many people had reported
problems getting the 7.2 and 7.2.1 client to work, but we are planning on
moving to the 7.2.x client soon.  We're also disappointed to see that

- there's no 7.3 client yet.
- There's no plans within EMC/Legato to support NSS volumes under Linux.

For others that might be wondering, the nsrexecd buffer overflow issue I
mentioned in the earlier email is LGTpa84882 .  The product alert says
it's fixed in 7.2.2, but the 7.2.2 fixed bugs list doesn't mention it.

Tim
--
Tim Mooney                              mooney AT dogbert.cc.ndsu.NoDak DOT edu
Information Technology Services         (701) 231-1076 (Voice)
Room 242-J6, IACC Building              (701) 231-8541 (Fax)
North Dakota State University, Fargo, ND 58105-5164

To sign off this list, send email to listserv AT listserv.temple DOT edu and type 
"signoff networker" in the
body of the email. Please write to networker-request AT listserv.temple DOT edu 
if you have any problems
wit this list. You can access the archives at 
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER