Moderate Thunderbird Security Issue for Scientific Linux 40, 41 i386

Date: Tue, 4 Oct 2005 16:19:42 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Re: ERRATA for SL 302,303,304,305 x86_64 now available
In-Reply-To: 

GFS has been put into the errata area. It is not a security update, but
it has a dependancy on the new kernel, and if you are using GFS you
cannot update your kernel without these.
GFS, like the kernel, does NOT get updated automatically. You do have
to do it yourself.

 GFS-6.0.2.27-0.ia32e.rpm
 GFS-6.0.2.27-0.x86_64.rpm
 GFS-devel-6.0.2.27-0.ia32e.rpm
 GFS-devel-6.0.2.27-0.x86_64.rpm
 GFS-modules-6.0.2.27-0.ia32e.rpm
 GFS-modules-6.0.2.27-0.x86_64.rpm
 GFS-modules-smp-6.0.2.27-0.x86_64.rpm
 clumanager-1.2.28-1.x86_64.rpm
 piranha-0.7.11-1.1.x86_64.rpm
 redhat-config-cluster-1.0.8-1.noarch.rpm

Connie Sieh wrote:
> The following ERRATA for SL 302,303,304,305 x86_64 are now available from:
> >
> Note that the default yum-conf does NOT update either openafs or kernels.
> You have to do that yourself. Yum is your friend.
>
> Synopsis: Updated kernel packages
> Advisory ID: RHSA-2005:663-01
> Obsoletes: RHSA-2005:472
> CVE Names: CAN-2004-0181 CAN-2004-1056 CAN-2005-0124 CAN-2005-0136
> CAN-2005-0179 CAN-2005-0210 CAN-2005-0400 CAN-2005-0504
> CAN-2005-0756 CAN-2005-0815 CAN-2005-1761 CAN-2005-1762
> CAN-2005-1767 CAN-2005-1768 CAN-2005-2456 CAN-2005-2490
> CAN-2005-2553 CAN-2005-2555
>
> kernel-2.4.21-37.EL.ia32e.rpm
> kernel-2.4.21-37.EL.x86_64.rpm
> kernel-doc-2.4.21-37.EL.x86_64.rpm
> kernel-smp-2.4.21-37.EL.x86_64.rpm
> kernel-smp-unsupported-2.4.21-37.EL.x86_64.rpm
> kernel-source-2.4.21-37.EL.x86_64.rpm
> kernel-unsupported-2.4.21-37.EL.ia32e.rpm
> kernel-unsupported-2.4.21-37.EL.x86_64.rpm
>
> Openafs is being updated to the latest stable 1.2.x release (1.2.13),
> across all Scientific Linux 3.0.x distributions. This release of
> openafs has proven to be much more stable, and fixed many bugs from
> previous releases.
> In addition to openafs's fixes, the Scientific Linux openafs development
> team have updated various parts. "rpm -q --changelog openafs" will give
> all of the changes, but some of the more important ones are
> - Updated CellServDB
> - dynroot and fakestat are turned on by default now
> - Startup script has several bugs fixed
> - 64 bit aklog bug fixed
>
> openafs-1.2.13-15.17.SL.x86_64.rpm
> openafs-client-1.2.13-15.17.SL.x86_64.rpm
> openafs-compat-1.2.13-15.17.SL.x86_64.rpm
> openafs-debug-1.2.13-15.17.SL.x86_64.rpm
> openafs-devel-1.2.13-15.17.SL.x86_64.rpm
> openafs-kernel-source-1.2.13-15.17.SL.x86_64.rpm
> openafs-kpasswd-1.2.13-15.17.SL.x86_64.rpm
> openafs-krb5-1.2.13-15.17.SL.x86_64.rpm
> openafs-server-1.2.13-15.17.SL.x86_64.rpm
> kernel-module-openafs-2.4.21-*-1.2.13-15.17.SL.ia32e.rpm
>
> -Connie Sieh
> -Troy Dawson

--
__________________________________________________
Troy Dawson This email address is being protected from spambots. You need JavaScript enabled to view it. (630)840-6468
Fermilab ComputingDivision/CSS CSI Group
__________________________________________________
Date: Tue, 4 Oct 2005 16:24:24 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Re: ERRATA for SL 301,302,303,304,305 i386 now available
In-Reply-To: 

GFS has been put into the errata area. It is not a security update, but
it has a dependancy on the new kernel, and if you are using GFS you
cannot update your kernel without these.
GFS, like the kernel, does NOT get updated automatically. You do have
to do it yourself.

 GFS-6.0.2.27-0.i686.rpm
 GFS-devel-6.0.2.27-0.i686.rpm
 GFS-modules-6.0.2.27-0.i686.rpm
 GFS-modules-hugemem-6.0.2.27-0.i686.rpm
 GFS-modules-smp-6.0.2.27-0.i686.rpm
 clumanager-1.2.28-1.i386.rpm
 piranha-0.7.11-1.1.i386.rpm
 redhat-config-cluster-1.0.8-1.noarch.rpm

In addition, we have released the kernel, and the openafs upgrade for
Scientific Linux 301. We gave this an extra day or two of testing
because it is a bigger jump than later S.L. releases. But the upgrade
has passed every test we put it through.

-- Troy Dawson

Connie Sieh wrote:
> The following ERRATA for SL 302,303,304,305 i386 are now available from:
> >
> Note that the default yum-conf does NOT update either openafs or kernels.
> You have to do that yourself. Yum is your friend.
>
> Synopsis: Updated kernel packages
> Advisory ID: RHSA-2005:663-01
> Obsoletes: RHSA-2005:472
> CVE Names: CAN-2004-0181 CAN-2004-1056 CAN-2005-0124 CAN-2005-0136
> CAN-2005-0179 CAN-2005-0210 CAN-2005-0400 CAN-2005-0504
> CAN-2005-0756 CAN-2005-0815 CAN-2005-1761 CAN-2005-1762
> CAN-2005-1767 CAN-2005-1768 CAN-2005-2456 CAN-2005-2490
> CAN-2005-2553 CAN-2005-2555
>
> kernel-2.4.21-37.EL.athlon.rpm
> kernel-2.4.21-37.EL.i686.rpm
> kernel-BOOT-2.4.21-37.EL.i386.rpm
> kernel-doc-2.4.21-37.EL.i386.rpm
> kernel-hugemem-2.4.21-37.EL.i686.rpm
> kernel-hugemem-unsupported-2.4.21-37.EL.i686.rpm
> kernel-smp-2.4.21-37.EL.athlon.rpm
> kernel-smp-2.4.21-37.EL.i686.rpm
> kernel-smp-unsupported-2.4.21-37.EL.athlon.rpm
> kernel-smp-unsupported-2.4.21-37.EL.i686.rpm
> kernel-source-2.4.21-37.EL.i386.rpm
> kernel-unsupported-2.4.21-37.EL.athlon.rpm
> kernel-unsupported-2.4.21-37.EL.i686.rpm
>
> Openafs is being updated to the latest stable 1.2.x release (1.2.13),
> across all Scientific Linux 3.0.x distributions. This release of
> openafs has proven to be much more stable, and fixed many bugs from
> previous releases.
> In addition to openafs's fixes, the Scientific Linux openafs development
> team have updated various parts. "rpm -q --changelog openafs" will give
> all of the changes, but some of the more important ones are
> - Updated CellServDB
> - dynroot and fakestat are turned on by default now
> - Startup script has several bugs fixed
> - 64 bit aklog bug fixed
>
> openafs-1.2.13-15.17.SL.i386.rpm
> openafs-client-1.2.13-15.17.SL.i386.rpm
> openafs-compat-1.2.13-15.17.SL.i386.rpm
> openafs-debug-1.2.13-15.17.SL.i386.rpm
> openafs-devel-1.2.13-15.17.SL.i386.rpm
> openafs-kernel-source-1.2.13-15.17.SL.i386.rpm
> openafs-kpasswd-1.2.13-15.17.SL.i386.rpm
> openafs-krb5-1.2.13-15.17.SL.i386.rpm
> openafs-server-1.2.13-15.17.SL.i386.rpm
> kernel-module-openafs-2.4.21-*-1.2.13-15.17.SL.athlon.rpm
>
> -Connie Sieh
> -Troy Dawson

--
__________________________________________________
Troy Dawson This email address is being protected from spambots. You need JavaScript enabled to view it. (630)840-6468
Fermilab ComputingDivision/CSS CSI Group
__________________________________________________
Date: Fri, 7 Oct 2005 15:33:56 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: ERRATA for SL 40,41 i386 now available
Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it.

The following ERRATA for SL 40,41 i386 are now available from:

Synopsis: Low: binutils security update
Advisory ID: RHSA-2005:673-01
CVE Names: CAN-2005-1704

 binutils-2.15.92.0.2-15.i386.rpm

Synopsis: Low: gdb security update
Advisory ID: RHSA-2005:709-01
CVE Names: CAN-2005-1704 CAN-2005-1705

 gdb-6.3.0.0-1.63.i386.rpm

Synopsis: Updated kernel package containing security updates
Advisory ID: RHSA-2005:514-01
CVE Names: CAN-2005-0756 CAN-2005-1265 CAN-2005-1761
CAN-2005-1762 CAN-2005-1763 CAN-2005-2098 CAN-2005-2099 CAN-2005-2100
CAN-2005-2456 CAN-2005-2490 CAN-2005-2492 CAN-2005-2555 CAN-2005-2801
CAN-2005-2872

 kernel-2.6.9-22.EL.i686.rpm
 kernel-devel-2.6.9-22.EL.i686.rpm
 kernel-hugemem-2.6.9-22.EL.i686.rpm
 kernel-hugemem-devel-2.6.9-22.EL.i686.rpm
 kernel-module-openafs-2.6.9-22.EL-1.3.82-3.SL.i686.rpm
 kernel-module-openafs-2.6.9-22.ELsmp-1.3.82-3.SL.i686.rpm
 kernel-smp-2.6.9-22.EL.i686.rpm
 kernel-smp-devel-2.6.9-22.EL.i686.rpm

Synopsis: Low: mysql security update
Advisory ID: RHSA-2005:685-01
CVE Names: CAN-2005-1636

 mysql-4.1.12-3.RHEL4.1.i386.rpm
 mysql-bench-4.1.12-3.RHEL4.1.i386.rpm
 mysql-devel-4.1.12-3.RHEL4.1.i386.rpm
 mysql-server-4.1.12-3.RHEL4.1.i386.rpm

Synopsis: Low: net-snmp security update
Advisory ID: RHSA-2005:395-01
CVE Names: CAN-2005-1740 CAN-2005-2177

 net-snmp-5.1.2-11.EL4.6.i386.rpm
 net-snmp-devel-5.1.2-11.EL4.6.i386.rpm
 net-snmp-libs-5.1.2-11.EL4.6.i386.rpm
 net-snmp-perl-5.1.2-11.EL4.6.i386.rpm
 net-snmp-utils-5.1.2-11.EL4.6.i386.rpm

Synopsis: Low: perl security update
Advisory ID: RHSA-2005:674-01
CVE Names: CAN-2005-0448

 perl-5.8.5-16.RHEL4.i386.rpm
 perl-suidperl-5.8.5-16.RHEL4.i386.rpm

Synopsis: Low: slocate security update
Advisory ID: RHSA-2005:346-01
CVE Names: CAN-2005-2499

 slocate-2.7-13.el4.6.i386.rpm

Synopsis: Important: thunderbird security update
Advisory ID: RHSA-2005:791-01
CVE Names: CAN-2005-2871 CAN-2005-2702 CAN-2005-2703 CAN-2005-2704
CAN-2005-2705 CAN-2005-2706 CAN-2005-2707 CAN-2005-2968

 thunderbird-1.0.7-1.4.1.i386.rpm

--Troy Dawson