Conectiva: There is a buffer overflow vulnerability in several DNS resolver libraries that affect all applications linked to these libraries. In Conectiva Linux the vulnerability affects the libbind library included in the BIND distribution and a resolver library included with glibc.”

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- --------------------------------------------------------------------------

PACKAGE   : Resolver libraries
SUMMARY   : Resolver libraries vulnerabilities
DATE      : 2002-07-11 18:34:00
ID        : CLA-2002:507
RELEVANT
RELEASES  : 6.0, 7.0, 8

- -------------------------------------------------------------------------

DESCRIPTION
 There is a buffer overflow vulnerability[1,4] in several DNS resolver
 libraries that affect all applications linked to these libraries.

 In Conectiva Linux the vulnerability affects the libbind library
 included in the BIND[2] distribution and a resolver library included
 with glibc.

 A remote attacker who is able to send malicious DNS responses to
 vulnerable machines could exploit this vulnerability and potentially
 execute arbitrary code with the privileges of the application making
 use of the vulnerable resolver library.

 Regarding the BIND 9.x packages distributed with Conectiva Linux 7.0
 and 8, the "libbind" library is not included nor generated, which
 means that these packages are not vulnerable to this problem.

 The 8.2 BIND packages shipped with Conectiva Linux 6.0, on the other
 hand, use the libbind library in their utilities and are being
 upgraded to the 8.2.6 version which was released by ISC[3] to address
 this problem. Please note that the "named" daemon is believed to be
 *not* vulnerable to this problem, even in versions prior to 8.2.6.

 Glibc has this vulnerability in the getnetby* family of functions
 when the system is configured to use dns to resolve network names. In
 the default installation, however, this is disabled in the
 /etc/nsswitch.conf configuration file:

 Example of a vulnerable system:
 networks: files dns

 System without this vulnerability exposed (default nsswitch
 configuration):
 networks: files


SOLUTION
 It is recommended that all users upgrade the glibc packages. If an
 upgrade is not possible at this time, please review the
 /etc/nsswitch.conf file and make sure your configuration is not
 vulnerable.

 Conectiva Linux 6.0 BIND users should also upgrade the bind packages.
 After the upgrade the service will be automatically restarted if it
 was already running.

 After upgrading the glibc packages, all programs linked against it
 need to be restarted in order to use the newly installed files. A
 list of such programs can be obtained by executing the following
 command (the "lsof" package has to be installed):

 lsof | grep libc.*;

 The first column will show the name of the program that will need to
 be restarted. If there is any doubt about which service needs a
 restart, then a reboot is recommended.


 REFERENCES
 1. http://www.cert.org/advisories/CA-2002-19.html
 2. http://www.isc.org/products/BIND/bind-security.html
 3. http://www.isc.org/
 4. http://www.pine.nl/advisories/pine-cert-20020601.asc


DIRECT DOWNLOAD LINKS TO THE UPDATED PACKAGES
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/bind-8.2.6-1U60_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/bind-chroot-8.2.6-1U60_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/bind-8.2.6-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/bind-devel-8.2.6-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/bind-devel-static-8.2.6-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/bind-doc-8.2.6-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/bind-utils-8.2.6-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/bind-chroot-8.2.6-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/glibc-2.1.3-26U60_2cl.src.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/glibc-2.1.3-26U60_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/glibc-devel-2.1.3-26U60_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/glibc-devel-static-2.1.3-26U60_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/glibc-doc-2.1.3-26U60_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/glibc-profile-2.1.3-26U60_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/i18ndata-2.1.3-26U60_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/nscd-2.1.3-26U60_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/glibc-2.2.3-19U70_2cl.src.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-base-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-devel-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-devel-static-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-doc-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-gconvdata-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-af-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ar-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-be-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-bg-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ca-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-cs-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-da-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-de-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-el-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-en-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-es-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-et-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-eu-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-fa-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-fi-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-fo-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-fr-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ga-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-gl-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-gv-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-he-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-hi-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-hr-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-hu-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-id-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-is-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-it-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-iw-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ja-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-kl-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ko-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-kw-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-lt-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-lv-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-mk-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-mr-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ms-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-mt-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-nl-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-nn-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-no-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-pl-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-pt-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ro-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ru-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-sk-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-sl-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-sq-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-sr-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-sv-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ta-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-te-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-th-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-tr-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-uk-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-vi-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-zh-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-iconv-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-profile-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ldconfig-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/nscd-2.2.3-19U70_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/SRPMS/glibc-2.2.4-12U8_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-base-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-charmaps-extras-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-devel-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-devel-static-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-doc-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-gconvdata-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-af-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ar-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-be-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-bg-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ca-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-cs-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-da-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-de-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-el-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-en-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-es-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-et-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-eu-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-fa-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-fi-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-fo-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-fr-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ga-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-gl-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-gv-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-he-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-hi-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-hr-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-hu-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-id-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-is-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-it-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-iw-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ja-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-kl-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ko-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-kw-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-lt-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-lv-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-mk-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-mr-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ms-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-mt-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-nl-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-nn-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-no-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-pl-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-pt-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ro-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ru-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-sk-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-sl-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-sq-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-sr-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-sv-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ta-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-te-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-th-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-tr-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-uk-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-vi-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-zh-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-iconv-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-locales-extras-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-profile-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ldconfig-2.2.4-12U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/nscd-2.2.4-12U8_1cl.i386.rpm


ADDITIONAL INSTRUCTIONS
 Users of Conectiva Linux version 6.0 or higher may use apt to perform
 upgrades of RPM packages:
 - add the following line to /etc/apt/sources.list if it is not there yet
   (you may also use linuxconf to do this):

 rpm [cncbr] ftp://atualizacoes.conectiva.com.br 6.0/conectiva updates

(replace 6.0 with the correct version number if you are not running CL6.0)

 - run:                 apt-get update
 - after that, execute: apt-get upgrade

 Detailed instructions reagarding the use of apt and upgrade examples
 can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en


- -------------------------------------------------------------------------
All packages are signed with Conectiva's GPG key. The key and instructions
on how to import it can be found at
http://distro.conectiva.com.br/seguranca/chave/?idioma=en
Instructions on how to check the signatures of the RPM packages can be
found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en
- -------------------------------------------------------------------------
All our advisories and generic update instructions can be viewed at
http://distro.conectiva.com.br/atualizacoes/?idioma=en

- -------------------------------------------------------------------------
subscribe: conectiva-updates-subscribe@papaleguas.conectiva.com.br
unsubscribe: conectiva-updates-unsubscribe@papaleguas.conectiva.com.br
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9LfoX42jd0JmAcZARAmxDAKCM/I4rGSDehucaQ05BdOx58FPvQgCdERYd
F4rX+MxchryrJ4VwcC/pzB0=
=y4SE
-----END PGP SIGNATURE----- 

This week’s edition of the LWN Weekly is out for July 11, 2002. Covered in this week’s issue are a number of topics including the European Commission’s open source software pool, the end of the road for the 2600 case, various security alerts, kernel discussions, and more.

“This HOWTO describes good release practices for Linux and other open-source projects. By following these practices, you will make it as easy as
possible for users to build your code and use it, and for other developers to understand your code and cooperate with you to improve it.

This document is a must-read for novice developers. Experienced developers should review it when they are about to release a new project. It will be
revised periodically to reflect the evolution of good-practice standards.”

Gentu writes: “In parallel to the KDE 3.1-alpha release today, OSNews published an interesting article discussing a number of User Inteface issues found on KDE 3. The article suggests a number of changes, some small, some pretty drastic. Towards the end of the two-part article, the author discusses the “integration” problem found in today’s X11 desktop environments, and how fixing this issue would bring Unix closer to average Joe’s desktop.”

Gentu writes: “In parallel to the KDE 3.1-alpha release today, OSNews published an interesting article discussing a number of User Inteface issues found on KDE 3. The article suggests a number of changes, some small, some pretty drastic. Towards the end of the two-part article, the author discusses the “integration” problem found in today’s X11 desktop environments, and how fixing this issue would bring Unix closer to average Joe’s desktop.”

From KDE.org: The KDE Project today announced the immediate availability of KDE 3.1 alpha1, the first development release of a significant feature upgrade for KDE 3 (screenshots). KDE 3 is the third generation of KDE’s free, powerful and easy-to-use Internet-enabled desktop for Linux and other UNIXes. KDE 3.1, scheduled for final release in October 2002, will provide substantial improvements to the KDE desktop experience. As the KDE 3 API is frozen for binary compatibility, KDE 3.1 will be binary compatible with KDE 3.0.

LinuxPlanet talks to Turbolinux about what the company sees as the strengths of its new four-distro coalition and its own strengths.

Bruce Knox writes: “This is the port of openMosix to the 2.4.18 Linux kernel and includes a compile-time option to disable the Out Of Memory (OOM) killer.

By default, the OOM killer is enabled (also, the RPMs are for OOM killer enabled).

Change Log, Source, and RPMs are available from the Download Section of www.openMosix.org.”

Much to the chagrin of its many users and wannabe users, the BSD operating system (the Berkeley System Distribution, a free Unix) has been without a book to help in managing BSD for many years. As true rocket scientists, BSD experts just aren’t the best teachers because they’re too busy developing and improving the operating system. As author Michael Lucas writes in Unix Review, “Those who know BSD love it. Those unfamiliar with it wonder if it’s a version of Linux, or if it runs on Windows NT.” BSD has needed a great book to demystify it and make it accessible to millions.
ABSOLUTE BSD: The Ultimate Guide to FreeBSD (No Starch Press, 1886411743, 612 pp, $39.95 US/$61.95 Cdn, Aug 02), by Michael Lucas, promises to be that definitive and badly needed guide to BSD.

ABSOLUTE BSD “focuses on solving real-world problems systems administrators face every day,” says Lucas, who is one of only 200 FreeBSD committers (developers who can change FreeBSD’s source code). “Most other BSD books talk about how to implement BSD-based solutions, but don’t go beyond that. Absolute BSD talks about how to manage and enhance systems that are already in place.” (FreeBSD is the most popular of five major versions of BSD.)

BSD users will learn to:

• Custom configure the FreeBSD kernel
• Use advanced security features like packet filtering and virtual machines
• Manage system-level software and work with add-on software; manage network services and filesystems
• Use DNS, and set up email, Web, and FTP services for servers and clients
• Back up their systems and recover from system crashes, debug problems, and prepare problem reports
• Use performance-testing and troubleshooting tools to monitor their systems

BSD is a robust, reliable, and free Unix whose popularity is exploding. According to Lucas, “The adoption of BSD has accelerated with Apple’s adoption of FreeBSD as the base of the new Mac OS X. Collaboration within the various branches of the BSD community is at an unparalleled height.”

Available in bookstores everywhere or from No Starch Press directly (http://www.nostarch.com), ABSOLUTE BSD promises to be the complete and authoritative guide that millions of BSD users have been anxiously awaiting.

ABOUT THE AUTHOR
Michael Lucas is one of only about 200 FreeBSD committers, a FreeBSD columnist for the O’Reilly Network, and a contributor to Sys Admin Magazine. He has been a pet wrangler, a librarian, a security consultant, and now works as a network engineer and systems administrator.

ADDITIONAL RESOURCES
Table of contents: http://www.nostarch.com/abs_bsd_toc.htm
Sample chapter: http://www.nostarch.com/AbsoluteBSD18.pdf

About No Starch Press
Since 1994, San Francisco based No Starch Press has been dedicated to producing readable, information-packed computer books. One of the few remaining independent computer book publishers, No Starch Press focuses on open source, web development, security, programming, and alternative operating systems.

ZDNet has the story about more than 50 IBM middleware products now available for Linux. That’s out of 300 middleware products available. “The real question for IT managers is whether Linux is ready to move beyond file and Web servers to application and Web services servers. The answer, if IBM has anything to do with it, is an unqualified yes.”