1. Vulnerability CA-2003-07

it's fixed by both
a.) RaQ4-All-Security-2.0.1-16402.pkg (Sun Cobalt)
b.) Sendmail 8.10.2-PM1 (pkgmaster)

Currently i'm runnin the pkgmaster one, should i uninstall it and do the cobalt's one?

2. Vulnerability CA-2003-12

it's fixed both by
a.) ftp://ftp-eng.cobalt.com/pub/experimental...rity/sendmail2/
b.) raqtweak's new sendmail patch

Which one should I install?

I used the ftp-eng.cobalt.com on about 30 systems..

It worked on al systems, BUT I made copies off /etc/mail/sendmail.cf and copied it back after the update.

Also some file's in /etc/mail are owned by bin.bin after the update.
So I chown-ed them al back to root.root