[FW-1] Another Excellent reason not to Install Patches when they are released

[Benjamin Keller <benjamin@FW1-NOSPAMCONCEPTIS.COM>]

Hi All,

Just a heads up:


"Just a note to let you know that a bug was discovered in SP6 that has
security ramifications for specific deployments.  For that reason, we have
pulled SP6 until a fix can be rolled up into it.

Although SP6 was posted only Friday, a handful of customers may have
downloaded it.  We will notify each of these customers about this issue, as
well as provide them a workaround if they have already installed.

The bug only affects those deployments that have external CP modules
defined.  The bug allows these specific modules LDAP access to defined LDAP
servers.  A workaround that consists of an INSPECT change to block all LDAP
along with a requirement to explicitly allow required LDAP access exists.
A
fix should be available shortly and a reposting of SP6 will take place in a
few days."


Thanks,

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================