7.2 security updates for openssl, kernel and sane-backends are available from HP

[George France <france handhelds org>]

On  ftp://alpha.crl.dec.compub/linux/RedHat/7.2-alpha/updates/ are:

An updated kernel package that fixes the TASK_SIZE issue in do_brk().

The new files are:
	kernel-2.4.18-27.7.x.hp.alpha.rpm
      	kernel-milo-2.4.18-27.7.x.hp.alpha.rpm
	kernel-source-2.4.18-27.7.x.hp.alpha.rpm
	kernel-BOOT-2.4.18-27.7.x.hp.alpha.rpm
	kernel-numa-2.4.18-27.7.x.hp.alpha.rpm
	kernel-utils-2.4-8.13.7.2.alpha.rpm
	kernel-doc-2.4.18-27.7.x.hp.alpha.rpm
	kernel-smp-2.4.18-27.7.x.hp.alpha.rpm

Upgrading to LInux-2.4.18-27.7.1hp:

	1) install the new kernel rpm that is appropriate for your system:
		"rpm -i kernel-<name>2.4.18-27.7.1hp.rpm"
	2) use your favorite editor to modify your /etc/aboot.conf file, by copying
	the first line to the end of the file, then change the number 0 to a 4, then
	on the last line change the two occurrences of 18-27.7.x.hp to 18-27.7.1hp.  You
	should have a file the looks like:

	# aboot default configurations
	# NOTICE: You have a /boot partition. This means that
	#         all kernel paths are relative to /boot/
	0:1/vmlinuz-2.4.18-27.7.x.hp root=/dev/sda3 initrd=/initrd-2.4.18-27.7.x.hp.img  console=tty0
	1:1/vmlinuz-2.4.18-27.7.x.hp root=/dev/sda3 initrd=/initrd-2.4.18-27.7.x.hp.img  console=ttyS0
	2:1/vmlinuz-2.4.18-27.7.x.hp root=/dev/sda3 initrd=/initrd-2.4.18-27.7.x.hp.img  console=ttyS0 console=tty0
	3:1/vmlinuz-2.4.18-27.7.x.hp root=/dev/sda3 initrd=/initrd-2.4.18-27.7.x.hp.img  single
	4:1/vmlinuz-2.4.18-27.7.1hp root=/dev/sda3 initrd=/initrd-2.4.18-27.7.1hp.img  console=tty0

   or

     	# aboot default configurations
	# NOTICE: You have a /boot partition. This means that
	#         all kernel paths are relative to /boot/
	0:1/vmlinuz-2.4.18-27.7.x.hpsmp root=/dev/sda3 initrd=/initrd-2.4.18-27.7.x.hpsmp.img  console=tty0
        1:1/vmlinuz-2.4.18-27.7.x.hpsmp root=/dev/sda3 initrd=/initrd-2.4.18-27.7.x.hpsmp.img  console=ttyS0
	2:1/vmlinuz-2.4.18-27.7.x.hpsmp root=/dev/sda3 initrd=/initrd-2.4.18-27.7.x.hpsmp.img  console=ttyS0 console=tty0
	3:1/vmlinuz-2.4.18-27.7.x.hpsmp root=/dev/sda3 initrd=/initrd-2.4.18-27.7.x.hpsmp.img  single
	4:1/vmlinuz-2.4.18-27.7.1hpsmp root=/dev/sda3 initrd=/initrd-2.4.18-27.7.1hpsmp.img  console=tty0


	3) halt your system.
	4) boot your system from SRM with:
		"b -fl 4"

   If you are happy with the new kernel:
	1) edit your /etc/aboot.conf file:
            change all occurrences of 18-27.7.x.hp to 18.-27.7.1hp and remove the last line which is now a duplicate of line n\umber 1.
        2) remove the previous rpms:
		"rpm -e kernel-<name>2.4.18-27.7.x.hp"
	3) reboot your system.

Some of you may notice that the x. was taken out of the file name.  This was done
due to rpm not understanding alphabetic version numbers, so that
kernel-2.4.18-27.7.x.1hp would be the same as kernel-2.4.18-27.7.x.hp, along with the
fact that RH took out the ".x" on their latest kernel release.


Updated OpenSSL packages that fix ASN.1 parsing vulnerabilities:
	https://rhn.redhat.com/errata/RHSA-2003-291.html

The new files are:
	openssl095a-0.9.5a-23.7.3.alpha.rpm
	openssl096-0.9.6-23.7.2hp.alpha.rpm
	openssl-0.9.6b-35.7.2hp.alpha.rpm
	openssl-devel-0.9.6b-35.7.2hp.alpha.rpm
	openssl-perl-0.9.6b-35.7.2hp.alpha.rpm


Updated SANE packages that resolve a number of vulnerabilities with the
saned daemon:
	https://rhn.redhat.com/errata/RHSA-2003-278.html

The new files are:
	sane-backends-1.0.5-4.3.alpha.rpm
	sane-backends-devel-1.0.5-4.3.alpha.rpm


Tomorrow afternoon the files should be propagated to 
	ftp://ftp2.compaq.com/pub/linux/RedHat/7.2-alpha/updates/ 

Best Regards,



--George