[CLA-2002:535] Conectiva Linux Security Announcement - glibc

From: secureat_private
Date: Tue Oct 29 2002 - 11:34:22 PST

  • Next message: secureat_private: "[CLA-2002:538] Conectiva Linux Security Announcement - tar/unzip"

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    - --------------------------------------------------------------------------
    CONECTIVA LINUX SECURITY ANNOUNCEMENT 
    - --------------------------------------------------------------------------
    
    PACKAGE   : glibc
    SUMMARY   : Fix for several vulnerabilities and daylight saving time for Brazil
    DATE      : 2002-10-29 16:33:00
    ID        : CLA-2002:535
    RELEVANT
    RELEASES  : 6.0, 7.0, 8
    
    - -------------------------------------------------------------------------
    
    DESCRIPTION
     The GNU C Library (glibc) is the standard library used by almost any
     program in a common GNU/Linux system. 
     
     This announcement addresses four security vulnerabilities in glibc
     and also fixes the Brazilian timezone regarding the daylight saving
     time.
     
     Vulnerabilities:
     
     1. XDR integer overflow [2][3]
     There is an integer overflow in the xdr_array() function derived from
     Sun's XDR library. This overflow can lead to memory being allocated
     with the wrong size, which will most likely cause buffer overflows
     later on depending on how applications use the allocated memory. The
     krb5 package also contains the vulnerable code and was already fixed
     in a previous announcement[10].
     
     2. Resolver read buffer overflow[4][5]
     There is a vulnerability in the way the resolver res_* family of
     functions contained in glibc and other BIND derived code are commonly
     used. These functions place their answer in a caller-supplied buffer.
     If this buffer is too small, the answer is truncated and the caller
     can check what the actual size should be by reading the return value
     of the function. Some callers, though, incorrectly take this value as
     the size of the buffer and may then read beyond its end, eventually
     causing a segmentation fault or some other kind of error.
     Thanks to Olaf Kirch for sharing a patch to fix this problem.
     
     3. calloc(3) integer overflow[6]
     calloc(3) is vulnerable to an integer overflow when multiplying the
     number of elements by the size of each element. This operation was
     not being verified and could result in less memory than needed to be
     allocated. Subsequent uses of this buffer would most likely result in
     buffer overflows.
     
     4. Possible information leak[7]
     Dmitry V. Levin spotted a possible information leak with undersized
     DNS responses, for which Solar Designer created a patch.
     
     
     Daylight saving time ("summer time") update
     
     On Octover 1st, 2002 the dates when daylight saving time will begin
     and end have finally been published[8] (a little more than 30 days of
     advance notice). These dates have been inserted in glibc's zoneinfo
     data.
     
     Historicaly the dates on which the daylight saving time starts and
     ends have always been choosen from year to year and are seldom the
     same. The National Observatory is conducting a poll[9] about this and
     we ask our users to take that poll and also manifest their opinion
     about the randomness with which these dates seem to be choosen. With
     luck, this kind of update will no longer be necessary in the future.
    
    
    SOLUTION
     It is recommended that all users upgrade their glibc packages. To fix
     the timezone regarding the daylight saving time in Brazil, please run
     the "timeconfig" tool after the update and re-select your timezone.
     
     IMPORTANT: all applications that were already running before the
     update must now be restarted. The following command will list those
     applications in the first column of the screen:
     
     lsof | grep \;
     
     If there is any doubt about which applications should be restarted,
     we recommend that the system be rebooted.
     
     
     REFERENCES
     1. http://www.gnu.org/software/libc/
     2. http://www.cert.org/advisories/CA-2002-25.html
     3. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0391
     4. http://www.kb.cert.org/vuls/id/738331
     5. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1146
     6. http://CERT.Uni-Stuttgart.DE/advisories/calloc.php
     7. http://www.openwall.com/Owl/CHANGES-1.0.shtml
     8. http://www.presidencia.gov.br/ccivil_03/decreto/2002/D4399.htm
     9. http://200.20.186.71/Hvpsqopn.asp
     10.http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000515&idioma=en
    
    
    DIRECT DOWNLOAD LINKS TO THE UPDATED PACKAGES
    ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/glibc-2.1.3-26U60_4cl.src.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/glibc-2.1.3-26U60_4cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/glibc-devel-2.1.3-26U60_4cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/glibc-devel-static-2.1.3-26U60_4cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/glibc-doc-2.1.3-26U60_4cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/glibc-profile-2.1.3-26U60_4cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/i18ndata-2.1.3-26U60_4cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/6.0/RPMS/nscd-2.1.3-26U60_4cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/glibc-2.2.3-19U70_3cl.src.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-base-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-devel-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-devel-static-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-doc-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-gconvdata-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-af-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ar-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-be-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-bg-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ca-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-cs-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-da-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-de-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-el-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-en-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-es-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-et-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-eu-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-fa-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-fi-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-fo-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-fr-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ga-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-gl-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-gv-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-he-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-hi-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-hr-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-hu-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-id-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-is-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-it-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-iw-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ja-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-kl-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ko-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-kw-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-lt-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-lv-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-mk-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-mr-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ms-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-mt-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-nl-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-nn-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-no-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-pl-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-pt-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ro-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ru-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-sk-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-sl-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-sq-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-sr-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-sv-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-ta-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-te-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-th-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-tr-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-uk-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-vi-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-i18n-zh-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-iconv-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/glibc-profile-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ldconfig-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/7.0/RPMS/nscd-2.2.3-19U70_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/SRPMS/glibc-2.2.4-12U80_3cl.src.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-base-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-charmaps-extras-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-devel-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-devel-static-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-doc-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-gconvdata-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-af-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ar-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-be-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-bg-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ca-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-cs-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-da-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-de-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-el-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-en-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-es-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-et-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-eu-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-fa-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-fi-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-fo-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-fr-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ga-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-gl-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-gv-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-he-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-hi-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-hr-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-hu-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-id-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-is-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-it-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-iw-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ja-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-kl-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ko-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-kw-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-lt-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-lv-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-mk-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-mr-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ms-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-mt-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-nl-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-nn-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-no-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-pl-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-pt-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ro-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ru-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-sk-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-sl-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-sq-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-sr-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-sv-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-ta-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-te-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-th-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-tr-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-uk-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-vi-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-i18n-zh-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-iconv-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-locales-extras-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/glibc-profile-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/ldconfig-2.2.4-12U80_3cl.i386.rpm
    ftp://atualizacoes.conectiva.com.br/8/RPMS/nscd-2.2.4-12U80_3cl.i386.rpm
    
    
    ADDITIONAL INSTRUCTIONS
     Users of Conectiva Linux version 6.0 or higher may use apt to perform 
     upgrades of RPM packages:
     - add the following line to /etc/apt/sources.list if it is not there yet
       (you may also use linuxconf to do this):
    
     rpm [cncbr] ftp://atualizacoes.conectiva.com.br 6.0/conectiva updates
    
    (replace 6.0 with the correct version number if you are not running CL6.0)
    
     - run:                 apt-get update
     - after that, execute: apt-get upgrade
    
     Detailed instructions reagarding the use of apt and upgrade examples 
     can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en
    
    
    - -------------------------------------------------------------------------
    All packages are signed with Conectiva's GPG key. The key and instructions
    on how to import it can be found at 
    http://distro.conectiva.com.br/seguranca/chave/?idioma=en
    Instructions on how to check the signatures of the RPM packages can be
    found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en
    - -------------------------------------------------------------------------
    All our advisories and generic update instructions can be viewed at
    http://distro.conectiva.com.br/atualizacoes/?idioma=en
    
    - -------------------------------------------------------------------------
    subscribe: conectiva-updates-subscribeat_private
    unsubscribe: conectiva-updates-unsubscribeat_private
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.6 (GNU/Linux)
    Comment: For info see http://www.gnupg.org
    
    iD8DBQE9vuK942jd0JmAcZARAkLVAJ0WQec+5Lj5wN1Yy9k4wVU1+P3DggCfb7b8
    UXJua3zuRq1RqQk/Kk72TvY=
    =s6Bv
    -----END PGP SIGNATURE-----
    



    This archive was generated by hypermail 2b30 : Wed Nov 06 2002 - 22:17:45 PST