Scientific Linux Errata 49 i386

Update: libvorbis-devel-1.1.0-4.el4.5

Wed, 15 Feb 2012 19:16:56 +0000

Package: libvorbis-devel
Summary: Development tools for Vorbis applications.

Description:
The libvorbis-devel package contains the header files and documentation needed to develop applications with Ogg Vorbis.

Changes:

libvorbis-devel-1.1.0-4.el4.5.i386 [557 KiB]

Changelog by Huzaifa Sidhpurwala (2012-02-14):

- Apply the correct patch for CVE-2012-0444

Update: libvorbis-1.1.0-4.el4.5

Wed, 15 Feb 2012 19:16:56 +0000

Package: libvorbis
Summary: The Vorbis General Audio Compression Codec.

Description:
Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The libvorbis package contains runtime libraries for use in programs that support Ogg Voribs.

Changes:

libvorbis-1.1.0-4.el4.5.i386 [187 KiB]

Changelog by Huzaifa Sidhpurwala (2012-02-14):

- Apply the correct patch for CVE-2012-0444

Update: glibc-2.3.4-2.57

Tue, 14 Feb 2012 17:40:08 +0000

Package: glibc
Summary: The GNU libc libraries.

Description:
The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important sets of shared libraries: the standard C library and the standard math library. Without these two libraries, a Linux system will not function.

Changes:

glibc-2.3.4-2.57.i386 [4.3 MiB]	Changelog by Jeff Law (2012-01-24): - Use malloc as needed in fnmatch (#769360)
glibc-2.3.4-2.57.i686 [6.0 MiB]	Changelog by Jeff Law (2012-01-24): - Use malloc as needed in fnmatch (#769360)

Update: glibc-common-2.3.4-2.57

Tue, 14 Feb 2012 17:40:08 +0000

Package: glibc-common
Summary: Common binaries and locale data for glibc

Description:
The glibc-common package includes common binaries for the GNU libc libraries, as well as national language (locale) support.

Changes:

glibc-common-2.3.4-2.57.i386 [15.7 MiB]

Changelog by Jeff Law (2012-01-24):

- Use malloc as needed in fnmatch (#769360)

Update: glibc-devel-2.3.4-2.57

Tue, 14 Feb 2012 17:40:08 +0000

Package: glibc-devel
Summary: Object files for development using standard C libraries.

Description:
The glibc-devel package contains the object files necessary for developing programs which use the standard C libraries (which are used by nearly all programs). If you are developing programs which will use the standard C libraries, your system needs to have these standard object files available in order to create the executables. Install glibc-devel if you are going to develop programs which will use the standard C libraries.

Changes:

glibc-devel-2.3.4-2.57.i386 [1.9 MiB]

Changelog by Jeff Law (2012-01-24):

- Use malloc as needed in fnmatch (#769360)

Update: glibc-headers-2.3.4-2.57

Tue, 14 Feb 2012 17:40:08 +0000

Package: glibc-headers
Summary: Header files for development using standard C libraries.

Description:
The glibc-headers package contains the header files necessary for developing programs which use the standard C libraries (which are used by nearly all programs). If you are developing programs which will use the standard C libraries, your system needs to have these standard header files available in order to create the executables. Install glibc-headers if you are going to develop programs which will use the standard C libraries.

Changes:

glibc-headers-2.3.4-2.57.i386 [590 KiB]

Changelog by Jeff Law (2012-01-24):

- Use malloc as needed in fnmatch (#769360)

Update: glibc-profile-2.3.4-2.57

Tue, 14 Feb 2012 17:40:08 +0000

Package: glibc-profile
Summary: The GNU libc libraries, including support for gprof profiling.

Description:
The glibc-profile package includes the GNU libc libraries and support for profiling using the gprof program. Profiling is analyzing a program's functions to see how much CPU time they use and determining which functions are calling other functions during execution. To use gprof to profile a program, your program needs to use the GNU libc libraries included in glibc-profile (instead of the standard GNU libc libraries included in the glibc package). If you are going to use the gprof program to profile a program, you'll need to install the glibc-profile package.

Changes:

glibc-profile-2.3.4-2.57.i386 [1.1 MiB]

Changelog by Jeff Law (2012-01-24):

- Use malloc as needed in fnmatch (#769360)

Update: glibc-utils-2.3.4-2.57

Tue, 14 Feb 2012 17:40:08 +0000

Package: glibc-utils
Summary: Development utilities from GNU C library

Description:
The glibc-utils package contains memusage, a memory usage profiler, mtrace, a memory leak tracer and xtrace, a function call tracer which can be helpful during program debugging. If unsure if you need this, don't install this package.

Changes:

glibc-utils-2.3.4-2.57.i386 [113 KiB]

Changelog by Jeff Law (2012-01-24):

- Use malloc as needed in fnmatch (#769360)

Update: nptl-devel-2.3.4-2.57

Tue, 14 Feb 2012 17:40:08 +0000

Package: nptl-devel
Summary: Header files and static libraries for development using NPTL library.

Description:
The nptl-devel package contains the header and object files necessary for developing programs which use the NPTL library (and either need NPTL specific header files or want to link against NPTL statically).

Changes:

nptl-devel-2.3.4-2.57.i386 [895 KiB]	Changelog by Jeff Law (2012-01-24): - Use malloc as needed in fnmatch (#769360)
nptl-devel-2.3.4-2.57.i686 [937 KiB]	Changelog by Jeff Law (2012-01-24): - Use malloc as needed in fnmatch (#769360)

Update: nscd-2.3.4-2.57

Tue, 14 Feb 2012 17:40:08 +0000

Package: nscd
Summary: A Name Service Caching Daemon (nscd).

Description:
Nscd caches name service lookups and can dramatically improve performance with NIS+, and may help with DNS as well. Note that you can't use nscd with 2.0 kernels because of bugs in the kernel-side thread support. Unfortunately, nscd happens to hit these bugs particularly hard.

Changes:

nscd-2.3.4-2.57.i386 [142 KiB]

Changelog by Jeff Law (2012-01-24):

- Use malloc as needed in fnmatch (#769360)

Update: squirrelmail-1.4.8-18.el4

Wed, 08 Feb 2012 20:51:56 +0000

Package: squirrelmail
Summary: SquirrelMail webmail client

Description:
SquirrelMail is a standards-based webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 (with no Javascript) for maximum compatibility across browsers. It has very few requirements and is very easy to configure and install. SquirrelMail has all the functionality you would want from an email client, including strong MIME support, address books, and folder manipulation.

Changes:

squirrelmail-1.4.8-18.el4.noarch [4.3 MiB]

Changelog by Michal Hlavinka (2012-01-31):

- fix typo in CVE-20210-4555 patch

Update: ghostscript-7.07-33.13.el4

Fri, 03 Feb 2012 05:20:41 +0000

Package: ghostscript
Summary: A PostScript(TM) interpreter and renderer.

Description:
Ghostscript is a set of software that provides a PostScript(TM) interpreter, a set of C procedures (the Ghostscript library, which implements the graphics capabilities in the PostScript language) and an interpreter for Portable Document Format (PDF) files. Ghostscript translates PostScript code into many common, bitmapped formats, like those understood by your printer or screen. Ghostscript is normally used to display PostScript files and to print PostScript files to non-PostScript printers. If you need to display PostScript files or print them to non-PostScript printers, you should install ghostscript. If you install ghostscript, you also need to install the ghostscript-fonts package.

Changes:

ghostscript-7.07-33.13.el4.i386 [7.6 MiB]

Changelog by Tim Waugh (2011-12-05):

- Applied patch to prevent null pointer dereference (CVE-2010-4054,
  bug #646086).

Update: ghostscript-devel-7.07-33.13.el4

Fri, 03 Feb 2012 05:20:41 +0000

Package: ghostscript-devel
Summary: Files for developing applications that use ghostscript.

Description:
The header files for developing applications that use ghostscript.

Changes:

ghostscript-devel-7.07-33.13.el4.i386 [34 KiB]

Changelog by Tim Waugh (2011-12-05):

- Applied patch to prevent null pointer dereference (CVE-2010-4054,
  bug #646086).

Update: ghostscript-gtk-7.07-33.13.el4

Fri, 03 Feb 2012 05:20:41 +0000

Package: ghostscript-gtk
Summary: A GTK-enabled PostScript(TM) interpreter and renderer.

Description:
A GTK-enabled version of Ghostscript, called 'gsx'.

Changes:

ghostscript-gtk-7.07-33.13.el4.i386 [26 KiB]

Changelog by Tim Waugh (2011-12-05):

- Applied patch to prevent null pointer dereference (CVE-2010-4054,
  bug #646086).

Update: openssl-0.9.7a-43.18.el4

Thu, 02 Feb 2012 01:55:29 +0000

Package: openssl
Summary: The OpenSSL toolkit.

Description:
The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols.

Changes:

openssl-0.9.7a-43.18.el4.i386 [1.1 MiB]

Changelog by Tomas Mraz (2012-01-27):

- CVE-2011-4576 - properly initialize SSL 3.0 block cipher padding (#771775)
- CVE-2011-4619 - fix SGC restart DoS attack (#771780)

openssl-0.9.7a-43.18.el4.i686 [1.1 MiB]

Changelog by Tomas Mraz (2012-01-27):

- CVE-2011-4576 - properly initialize SSL 3.0 block cipher padding (#771775)
- CVE-2011-4619 - fix SGC restart DoS attack (#771780)

Update: openssl-devel-0.9.7a-43.18.el4

Thu, 02 Feb 2012 01:55:29 +0000

Package: openssl-devel
Summary: Files for development of applications which will use OpenSSL.

Description:
OpenSSL is a toolkit for supporting cryptography. The openssl-devel package contains static libraries and include files needed to develop applications which support various cryptographic algorithms and protocols.

Changes:

openssl-devel-0.9.7a-43.18.el4.i386 [1.6 MiB]

Changelog by Tomas Mraz (2012-01-27):

- CVE-2011-4576 - properly initialize SSL 3.0 block cipher padding (#771775)
- CVE-2011-4619 - fix SGC restart DoS attack (#771780)

Update: openssl-perl-0.9.7a-43.18.el4

Thu, 02 Feb 2012 01:55:29 +0000

Package: openssl-perl
Summary: Perl scripts provided with OpenSSL.

Description:
OpenSSL is a toolkit for supporting cryptography. The openssl-perl package provides Perl scripts for converting certificates and keys from other formats to the formats used by the OpenSSL toolkit.

Changes:

openssl-perl-0.9.7a-43.18.el4.i386 [29 KiB]

Changelog by Tomas Mraz (2012-01-27):

- CVE-2011-4576 - properly initialize SSL 3.0 block cipher padding (#771775)
- CVE-2011-4619 - fix SGC restart DoS attack (#771780)

Update: php-4.3.9-3.36