LWN folks,

FYI, we just recently released a new version of our product incorporating
a number of security fixes.  More info is at:

  http://www.e-smith.org/article.php3?sid=39&mode=threaded&order=0

and in the release notes at:

  ftp://ftp.e-smith.org/pub/e-smith/e-smith-4.1.2/iso/RELEASE-NOTES

Dan

----- Forwarded message from Ross Laver <rlaver@e-smith.com> -----

Date: Mon, 23 Apr 2001 14:52:58 -0400
From: "Ross Laver" <rlaver@e-smith.com>

e-smith, inc. is pleased to announce the availability of the e-smith server
and gateway version 4.1.2. Version 4.1.2 is a security update to the 4.1.1
package and also contains several new features and corrections. These
security updates have been released as a result of an ongoing review of the
e-smith configuration, and in response to external security advisories.

e-smith, inc. advises all users of e-smith 4.1.1 to upgrade to e-smith
4.1.2. As an interim measure, we are also making available today a set of
update patches to secure existing 4.1.1 servers pending an upgrade to 4.1.2.

Versions prior to 4.1 are not vulnerable to the PPTP and NT password
problems described in the release notes, but are vulnerable to a remote root
compromise via an NTP vulnerability. We advise all users of earlier e-smith
releases to upgrade to 4.1.2.

Version 4.1.2 is available as an uncompressed ISO image from:

ftp://ftp.e-smith.org/pub/e-smith/e-smith-4.1.2/iso/

For details, please see the release notes at:

ftp://ftp.e-smith.org/pub/e-smith/e-smith-4.1.2/iso/RELEASE-NOTES

To install the 4.1.1 patches pending an upgrade to 4.1.2, follow the
instructions at:

ftp://ftp.e-smith.org/pub/e-smith/e-smith-4.1.2/4.1.1_updates

Ross Laver                         rlaver@e-smith.com
http://www.e-smith.com (corporate)  http://www.e-smith.org (development)
Tel: +1 (613) 368 4384 or 564 8000  Fax: +1 (613) 564 7739
e-smith, inc. 1500-150 Metcalfe St, Ottawa, ON K2P 1P1 Canada