Novell is now a part of Micro Focus

UnitedLinux 1.0 IPF Service Pack 3

Knowledgebase

(Last modified: 06NOV2003)


solutions UnitedLinux 1.0 IPF Service Pack 3 SuSE Linux Maintenance Web (a6e6b0759cb7dbea4787373a911ccb49)

Applies to

Package: OpenIPMI
OpenIPMI-devel
aaa_base
acl
acl-devel
alice-compat
at
attr
attr-devel
autoyast2
autoyast2-installation
bind9
bind9-devel
bind9-utils
binutils
cpp
cron
cups-drivers
cups-drivers-stp
dante
dante-devel
dante-server
dhcp6
dprobes
drbd
elilo
evlog
evlog-devel
evlog-snmp
evms
freeswan
gcc
gcc-c++
gcc-g77
gcc-info
gcc-java
gcc-objc
gedit2
glibc
glibc-devel
glibc-i18ndata
glibc-info
glibc-locale
gnome-session
gnome-terminal
heartbeat
heartbeat-ldirectord
heartbeat-pils
heartbeat-stonith
hotplug
hwinfo
hwinfo-devel
inn
iputils
k_debug
k_deflt
k_itanium2
k_itanium2-smp
k_page-64k
k_smp
kdelibs3
kdelibs3-cups
kdelibs3-devel
kernel-source
libgcc
libgcj
libgcj-devel
libobjc
libpcap
libstdc++
libstdc++-devel
libzvt2
libzvt2-devel
linux-iscsi
lkcdutils
lkcdutils-netdump-server
mkisofs
mod_php4
mod_php4-core
mod_php4-devel
mod_php4-servlet
modutils
mozilla
mozilla-calendar
mozilla-devel
mozilla-dom-inspector
mozilla-irc
mozilla-mail
mozilla-spellchecker
mozilla-venkman
mozilla-xmlterm
net-tools
nfs-utils
openssl
openssl-devel
pam
pam-devel
pam-laus
pam-modules
pam_krb5
parted
pciutils
pciutils-devel
perl-Curses
perl-XML-DOM
perl-XML-Generator
perl-XML-RegExp
ps
quota
raidtools
reiserfs
samba
samba-client
samba-vscan
scsi
scsirastools
selection-oracle
shadow
strace
sysconfig
sysstat
sysvinit
tcpdump
timezone
ttcp
ttf-arphic
ttf-arphic-bkai00mp
ttf-arphic-bsmi00lp
ttf-arphic-gbsn00lp
ttf-arphic-gkai00mp
ucdsnmp
unitedlinux-release
util-linux
wondershaper
x3270
xf86
xfsprogs
xfsprogs-devel
xntp
xntp-doc
xscsi
yast2-bootloader
yast2-installation
yast2-mouse
yast2-network
yast2-online-update
yast2-printer
yast2-storage
ypserv
Product(s): SuSE Linux Enterprise Server 8 for IPF

Release: 20031106
Obsoletes: none

Indications

Update system to Service Pack 3 level.
An alternative way besides downloading the patches or doing an online update via YOU is to download the ISO images for the Service Pack 3 CD:
http://sdb.suse.de/download/ia64/update/SuSE-SLES/8/images/UnitedLinux-1.0-SP-3-ia64-RC4-CD1.iso MD5SUM for this file is: 5c309df59a72ae2036953a53f02265f4 UnitedLinux-1.0-SP-3-ia64-RC4-CD1.iso
http://sdb.suse.de/download/ia64/update/SuSE-SLES/8/images/UnitedLinux-1.0-SP-3-ia64-RC4-CD2.iso MD5SUM for this file is: 33d781d1e832fb0aeb5061480c0e4254 UnitedLinux-1.0-SP-3-ia64-RC4-CD2.iso
Release Notes for UnitedLinux 1.0 IPF Service Pack 3
Overview
1. Enhancements
1.1 Installation 1.2 Standards 1.3 Platform/Hardware 1.4 Availability 1.5 Serviceability 1.6 Scalability 1.7 Performance 1.8 Security 1.9 Applications and Tools
2. Maintenance fixes
2.1 Bugfixes 2.2 Security fixes
3. New packages released with SP3
4. Support restrictions
5. Detailed ChangeLog
6. Known Bugs
1. Enhancements
1.1 Installation
  • support for multiple driver update floppies
  • NFS, HTTP and FTP install modes now also supported in autoyast
  • all installer/YaST2 fixes now available during installation in manual and autoyast mode when booting from Service Pack CD
  • support to update any RPM with SP3 RPMs during initial installation
  • support to overlay/replace any binary of the install environment
  • support to read in customized partition suggestion, including LVM. Very usefull during automated installations.
  • support to install the root partition on an MD RAID1
  • fixed USB mouse/keyboard/cdrom problems during installation/reboot
  • support DHCP network setup with more than one NIC installed
  • support md device with up to 27 disks
  • make EULA question timeout for automated installation
  • provided docu for setting up the network installation server (see docu/howto/Network-Install-HOWTO.txt on this CD) (see also http://www.suse.de/~nashif/autoinstall/8.1/html/advanced.html)
Important Note: The README on the toplevel of CD1 of this Service Pack contains detailed instructions on the different methods to install this Service Pack. Please read them and referred READMEs carefully.
After applying the update please have a look at the contents of the file /var/adm/rpmconfigcheck. This file contains a list of configuration files which could not be automatically updated. The reason usually is that the installed version was modified. These files have to be checked and the configurations needs to be adjusted manually.
1.2 Standards
  • comply with LSB 1.3 spec
  • prepared for CC-EAL3 certification
  • prepared for DII COE certification
  • included IGMPv3 for IPv4 support
  • included MLDv2 for IPv6 support
1.3 Platform/Hardware
  • updated kernel to 2.4.21 mainline kernel
  • moved all our patches to 2.4.21 base
  • included many bugfixes from 2.4.22 mainline kernel
  • integrated and hardened newest ACPI code
  • support many new hardware components via driver and PCI ID updates, e.g.
    • use full speed on symbios logic2 scsi controller
    • updated Emulex lpfc driver to version 1.23a
    • updated default Qlogic driver to version 6.06.00 (qla2x00), but also included the latest certified version 6.05.00 (qla2x00-60500) the latest beta version 6.06.50 (qla2x00-60650)
    • updated Syskonnect driver sk98lin to v6.18
    • updated IPVS to 1.0.10
    • updated CIFS to 0.8.7
    • updated megaraid2 driver to v2.00.8
    • updated cciss driver to 2.4.48
    • updated e1000 driver to 5.2.13
    • updated e100 driver to 2.3.18
    • updated IBM ServeRAID ips driver to 6.10.52
    • add support for 3c905C Tornado 2 to 3c59x driver
    • updated vtune driver to 1.0.188
    • ALSA update
    • included latest OpenIPMI driver and libs
    • native SATA support for ICH5 (experimental)
    • updated channel bonding driver
  • update XFS to 1.3.1
  • enablement of several new machines like SGI Altix or HP rx7620
  • support to install multiple kernel RPMs in parallel
  • kernel RPM release number and kernel variant queryable at runtime (uname -r )
  • several improvements to ease 3rd party module creation
    • enabled MODVERSIONS for better module insertion/interface support
    • added release-independent fallback search path in modprobe
    • provide pre-configured kernel headers for all kernel variants
    • included detailed docs about building 3rd party kernel modules and about building custom kernels (see docu/howto/Kernel-Build-HOWTO.txt on this CD or install the kernel-source package and see /usr/share/doc/packages/kernel-source/README.SuSE)
    • provided detailed docs about building custom driver update floppies (see docu/howto/Update-Media-HOWTO.txt on this CD)
  • detect and report LUNs via SCSI3 for devices which support it
  • updated and fixed iSCSI
  • support network attached storage devices (NAS)
  • support semtimedop syscall
  • SCSI subsystem now compiled as loadable module to simplify updates
  • many SCSI blacklist updates
  • added SCSI parameters for runtime tuning blacklists, probes, etc For Service Pack 3 a number of parameters have been introduced that change aspects of the way the SCSI bus is scanned by Linux. Normally, none of the parameters is needed. llun_blklst=C,B,T[,C,B,T[,C,B,T[,...]]] Adds devices, addressed by host adapter no (C), bus number (B, normally 0) and Target ID(T) to the blacklist with BLIST_LARGELUN | BLIST_SPARSELUN. This helps to detect LUNs above 7 on devices reporting as SCSI-2. It also allows LUNs to be nonconsecutive for the devices addressed with this parameter. [This parameter has been present since SLES8GA.] scsi_sparselun=1 Globally assumes the LUNs numbering may be non-consecutive. Potentially increases the scanning time, but makes sure all LUNs of a target are detected. scsi_largelun=1 Globally assumes devices can have LUNs larger than 7, independent of the SCSI version they report. Normally, only SCSI-3 devices should have LUNs larger than 7. scsi_noreportlun=1 For SCSI-3 devices the REPORT_LUN command is used to avoid the need for a serial scan and thus avoid problems with non-consecutive LUNs. This can be switched off with this parameter, which is needed in case the LUN mapping of the host adapter and the Linux are different. For the zfcp adapter, REPORT_LUN is not used. scsi_reportlun2=1 Also try REPORT_LUN for SCSI devices that report as SCSI-2 and are connected to a host adapter that supports more than 8 LUNs per target. scsi_allow_ghost_devices=N This allows to access LUNs with a unit number smaller than N to be accessed despite it reporting as offline. This is needed for some EMC storage devices. scsi_inq_timeout=N This allows to set the SCSI scanning timeout in seconds. Some broken hardware needs larger values than the default of 6. There's one SCSI to IDE converter known to need 25. The default on ppc64 is 25.
Important note: The IPsec code in the kernel of Service Pack 3 has received some changes that make it necessary to install the freeswan package from Service Pack 3 as well to make it work.
1.4 Availability
  • MD driver multipathing improvements and fixes
  • updated heartbeat to version 1.0.4
  • updated drbd to version 0.6.6
  • add hangcheck-timer module which is needed for Oracle failover
  • included ocfs module from Oracle
1.5 Serviceability
  • updated POSIX event logging to version 1.5.3 (evlog)
  • updated linux kernel crash dump (lkcd)
  • updated dprobes and Linux Trace Toolkit (dprobes+LTT)
  • provided documentation for using the RAS features (see docu/howto/RAS-HOWTO.txt on this CD)
1.6 Scalability
  • now support by default up to 144 major numbers for up to 2000 disks
  • support for optimized high resolution timers
  • support page_cache_lock to walk the address space's page lists
  • extended NFS mount limit to 1024
  • dynamically size the kernel message buffer via log_buf_len parameter
1.7 Performance
  • support varyio for async I/O over rawio (25% performance win)
  • improved InterProcess Communication (IPC) scalability
  • using ReadCopyUpdate to build lock-free IPC mechanism
  • huge SPECweb99 improvement via improved arch_get_unmapped_area
  • support O_DIRECT via NFS (20-30% with TPC-C workloads)
  • AIO and AIO+O_DIRECT support for block devices
  • alternative to remap_file_pages
  • copyin/out patch
  • dynamic configuration/tuning of scheduler via sched_yield_scale Added sysctl_sched_yield_scale feature that allows choosing between optimization for scalability and interactiveness. By default it is switched off, so the behaviour is completely unchanged. For certain benchmarks, one wants to "echo 1 > /proc/sys/kernel/sched_yield_scale"
1.8 Security
  • include static Brazilian government certificates
  • prepared for CC-EAL3 certification
  • prepared for DII COE certification
  • included all security fixes (see 2.2 below)
1.9 Applications and Tools
  • added Mozilla version 1.4
  • added gedit package
  • added gnome-terminal
  • updated Bind (DNS) to version 9.2.2
  • updated Samba to version 2.2.8a plus additional patches
    • Windows XP clients now work out of the box and can automatically join the domain without modifications on the client side
    • handle logons restrictions of userworkstations in domain security
    • added uid/gid caching code which reduces load on winbindd
    • large file system support for smbclient
    • unicode, escape character and 32bit UID support for smbmount
  • updated DHCPv6 to version v0.8
  • added IGMPv3 for IPv4 support
  • added MLDv2 for IPv6 support
  • added network traffic shaper (wondershaper)
  • updated EVMS to version 1.2.1
  • fixed landscape printing in CUPS
  • add support for '-O _netdev' into mount(8)
2. Maintenance fixes
2.1 Bugfixes
Service Pack 3 contains all bugfixes released via the maintenance Web since the GA version. In addition the following packages now getting released with SP3 have seen bugfixes/enhancements:
  • Updated aaa_base (bugfix/feature) [aaa_base]
    • if mount does not yet support -O no_netdev, fall back to call without.
    • pass scsi parameters from cmdline to scsi_mod.
    • increase the initial initrd image size to work with k_debug kernel.
    • fix mkinitrd to handle `-b /' correctly.
    • mkinitrd: fixed splash code
    • boot.localfs: don't mount filesystems marked as _netdev
    • prepare mkinitrd for 2.6 kernels
    • temporarily mount shm filesystem over /etc/lvmtab.d in the linuxrc script to have more space available for lvm commands.
    • add md to list of introduced modules.
    • remove the check for xntp before writeback to hwclock
    • Remove now-obsolete oem resize support.
    • update mkinitrd to correctly add the mod_sd module when any SCSI modules are listed in /etc/sysconfig/kernel in INITRD_MODULES.
    • mkinitrd: dhcp: allow servername in rootpath
    • add missing mount line in rc for /proc file system
    • mkinitrd: handle line continuation and quoting in /etc/modules.conf
  • Updated acl (bugfix/feature) [acl] [acl-devel]
    • Update manual pages
  • Updated at (feature) [at]
    • added laus patch for auditing support
  • Updated attr (feature) [attr] [attr-devel]
    • Update manual pages
  • Updated autoyast2 (bugfix/feature) [autoyast2] [autoyast2-installation]
    • workaround file conflict during SP3 install
    • allow setting of the partition type (primary/extended)
    • LVM/RAID can now be reconfigured using autoyast
    • fixed bug to enable swap on RAID
    • report correct RAID sizes
    • fix LVM cloning in autoyast
    • perl scripts now run during post-install phase
    • create extended partitions with id 15 when cloning
  • Updated bind9 (bugfix/feature) [bind9] [bind9-devel] [bind9-utils]
    • update to version 9.2.2; maintenance/ bugfix release
    • add NAMED_ADD_CONF_FILES to /etc/sysconfig/named to handle additional configuration files get copied into the chroot jail
    • create named.conf.include if it does not exist
    • move root.hint to an extra source file, named.root
    • use /etc/named.d and /var/lib/named/master directory in the example configuration from the sample-config directory
    • add config: syslog-ng to sysconfig.syslog-named
    • add NAMED_ARGS to sysconfig.named
    • create /etc/rndc.key with 512bit sized key in %post
    • create /etc/rndc.key in the init script if it's missing
    • always include /etc/rndc.key in rndc-access.conf
    • add default /etc/named.d/rndc-access.conf (on install, not on update)
    • set owner of /etc/named.d and /etc/named.d/rndc-access.conf to root:
    • add SuSEconfig.named
    • add all included files to NAMED_CONF_INCLUDE_FILES of /etc/sysconfig/name d while update if NAMED_CONF_INCLUDE_FILES is empty
    • add additional sysconfig meta data
    • unify init scripts; add one space at the end to all echos
    • fix try-restart part of init skript
    • set PATH to "/sbin:/usr/sbin:/bin:/usr/bin"
    • fix file section
    • create additional sub directories log, dyn and master in /var/named
    • add a non active logging example to named.conf
    • also create named user/group in utils preinstall
    • create named user/group in preinstall and install
    • set /etc/named.conf to root:named and 0640
    • add an example to additional info mail for dynamic updates
    • add more information to the README.{SuSE,UnitedLinux}
    • add sysconfig file for chroot jail; default is yes
    • add chroot features to init script for start and reload
    • add separate binaries to PreReq
    • add --localstatedir=/var to configure call
    • add and autocreate /etc/rndc.{conf,key}
    • move rndc binaries and man pages to utils package
    • set ownership of /var/named to root:
    • document new features in the README
    • fix init script to return correspondig message to checkproc return code
    • add additional info mail about ownership of /var/named if journal files are used
  • Updated cron (feature) [cron]
    • added laus patch for auditing support
  • Updated cups (bugfix) [cups] [cups-client] [cups-devel] [cups-drivers] [cups-drivers-stp] [cups-libs]
    • fixed landscape problem from different creators
  • Updated dante (security/bugfix/feature) [dante] [dante-devel] [dante-server]
    • fix error trying to socksify ssh
    • add libdsocks.a to devel file list
  • Updated dhcp6 (feature) [dhcp6]
    • Upgraded to 0.85, added unsigned int configuration parse patch.
  • Updated dprobes (bugfix/feature) [dprobes]
    • dpcc and tailprint weren't built on i386 anymore
    • enabled support for other archs (i386, ia64, ppc, ppc64, s390, s390x)
  • Updated drbd (bugfix/feature) [drbd]
    • upgrade to 0.6.6 which includes proper fixes for the previous hotfixes
    • correct memory barrier handling between resyncer and write IO to prevent unlikely race which could cause data corruption.
    • fix data corruption during sync if write access occurs with a blksize != 4096 bytes.
    • on upgrade, the old RPMs would remove the datadisk script. Recreate it via triggerpostun to fix upgrade bugs.
    • configure kernel source
    • fix for unacked << 0 messages. (L3 fix)
    • fix distribution detection.
    • build fixes for ARCH=um (no effect on other archs).
  • Updated evlog (security/bugfix/feature) [evlog] [evlog-devel] [evlog-snmp]
    • updated to 1.5.3
    • applied patch to SNMP subagent
    • fixed "rcevlog status" if snmp agent is not installed
    • suppress evlogmgr messages resulting from evlogd not running
    • tcp_rmtlog FIFO goes into /var/run, not /opt/evlog
    • include /var/log/evlog in file list
    • fixed bracketing messed up by Opteron patch
    • fixed conflict between evlog/evlog-snmp
    • added missing /usr/share/snmp/mibs/LINUX-EVENT-LOG-MIB.mib
    • merged patches to enable SNMP access to event log
    • fixed a few more hardcoded pathnames in various source files
  • Updated evms (feature) [evms]
    • update to version 1.2.1 of user level tools
    • use new sysconfig metdata
    • fix some things in start script
    • add missing documentation files to RPM
  • Updated freeswan (bugfix/feature) [freeswan]
    • sample config: Make it working. conn %default should precede real configs .
    • ipsec look: Parse spd and sadb to produce diagnostic output
    • start KLIPS even without %defaultroute (hotplugging).
    • delete SA_IPIP as well, otherwise we leak them with USAGI kernel space.
    • configure kernel sources before compiling.
    • reenable libinet6 usage for SLES8.
    • rename the des_crypt.3 manpage to freeswan_des_crypt.3 to avoid conflict with the des_crypt.3 from the man-pages package
    • Ignore "compress" option in config file (and warn user).
    • added patch to support MS L2TP
    • remove uninstalled secrets.
    • fix for chown usage.
    • remove libinet6 from neededforbuild
    • added missing directories to filelist
    • remove .cvsignore files
  • Updated gcc (security/bugfix/feature) [cpp] [gcc] [gcc-c++] [gcc-g77] [gcc-info] [gcc-java] [gcc-objc] [libgcc] [libgcj] [libgcj-devel] [libobjc] [libstdc++] [libstdc++-devel]
    • add fix for PR11693.
  • Updated glibc (security/bugfix/feature) [glibc] [glibc-devel] [glibc-i18ndata] [glibc-info] [glibc-locale] [timezone]
    • do parallel "make check", lowers build time considerably
    • add GB18030 backport from glibc 2.3.2
    • add real memcpy fix
    • add pause() backport from glibc 2.3.x
  • Updated gnome-session (security/bugfix/feature) [gnome-session]
    • expand gnome-session script to stop all running gnome configuration and object servers on logout
  • Updated heartbeat (bugfix/feature) [heartbeat] [heartbeat-ldirectord] [heartbeat-pils] [heartbeat-stonith]
    • upgrade to version 1.0.4
    • fix for heartbeat starting resources twice and concurrently in the non-nice_failback configurations.
    • fix CCM/STONITH integration issue which could affect EVMS in cluster mode .
    • fix memory leak in heartbeat API.
    • fix for an unused variable.
    • set CCM FIFO permissions correctly.
    • handle netmask correctly in findif.
    • fix for reload bug.
    • fix for STONITH not being executed on startup if other node is down.
  • Updated hotplug (bugfix) [hotplug]
    • add mousedev and keybdev to the static usb modules list hotplug can not detect the needed drivers in some cases
  • Updated hwinfo (bugfix) [hwinfo] [hwinfo-devel]
    • avoid pci config type detection on Gateway 920
    • updated e100 module data
    • more modules need mii.o
    • ibmsis driver info updated
    • serial mouse probing could hang in some cases
    • don't read from cd drives that don't exist
  • Updated inn (bugfix) [inn]
    • convertspool: use split -a 5
  • Updated iputils (bugfix/feature) [iputils]
    • add ifenslave
  • Updated KERNEL (security/bugfix/feature) [k_debug] [k_deflt] [k_itanium2] [k_itanium2-smp] [k_smp] [kernel-source]
    The SP3 kernel has been extensively tested on high workloads and during stress and benchmark tests. The following bugfixes were applied:
    • fixed IPv6 refcounting problems that prevented module unloading
    • avoid potential reiserfs log deadlock
    • avoid potential stack overflow in SCSI mid layer
    • fix VM race in execve
    • fix memory leak in LVM
    • prevent memory corruption when reading /proc files
    • prevent stack overflow in nfsd/fh_verify
    • fix overflow of used-bytes counter in old quota format
    • fix fs corruption when reiserfs is cleaning up lost files after crash
    • fix a signedness bug in the ACL code
    • fix potential race in exit_mmap
    • fix to release NFS locks when process is killed
    • prevent oops in silly-delete/umount race
    • fix locking bug in md/raid1
    • fix correct setup of ioperm bitmap
    • fix potential memleak in procfs
    • fix O(1) scheduler load balancing
    • fixes for >32 CPUs
    • fixes for ext3_read_inode() race and quota/truncate oops
    • fix signedness bug in proc-mapped-base feature
    • prevent serverworks chipset from crashing machine upon DMA errors
    • fix per-CPU interval timer smp locking bug
    • fix unshare-files bug that causes processes to lose POSIX file locks after execve(2)
    • fix overflow problem in NFSv3 decode_fh
    • prevent possible DoS in netfilter code
    • fix TIME_WAIT problem with nfsd fix
    • fix access to /proc/<pid>/cmdline
    • increase size of SCSI sense buffer to 96 bytes
    • fix nfsd vulnerability
    • fix execve() file read race vulnerability
    • have sd_open() schedule instead of spinning hard
    • prevent memory corruption in copy_namespace
    • fix deadlock in IPC SHM locking
    • remove SMP-unsafe check in __remove_inode_page
    • fix SMP races in floppy driver
    • fix kernel panic with pptpd when mss > mtu
    • fix possible DoS-Attack through /dev/console (TIOCCONS)
    • fix console redirect bug
    • fix incorrect memcpy in ioports fix
    • prevent kmalloc deadlock on LVM with lvm_mp_private struct
    • prevent IP ID wraparound in extremely constructed situations
    • fix retry on short packages for NFS server over TCP
    • fix NFS ACL checking problem which prevented access
    • avoid race condition in submit_bh
  • Updated kdelibs3 (bugfix/feature) [kdelibs3] [kdelibs3-cups] [kdelibs3-devel]
    • add ICP-Brasil CA
    • fix for konqueror to render indented lists correctly (for DII-COE cert)
  • Updated linux-iscsi (bugfix/feature) [linux-iscsi]
    • update to version 3.4.0.3
    • port patch to use internal syscall iface to 3.4.0.3.
    • add patch from NetApp
    • create an individual /etc/initiatorname.iscsi in %post
    • enhance init script
    • add missing dir to filelist
  • Updated lkcdutils (bugfix/feature) [lkcdutils] [lkcdutils-netdump-server]
    • update to CVS lkcdutils
    • fixed LKCD lkcd_netconfig
    • fixed netdump support
    • fix to display bitfields on BE archs
    • support for dynamic log_buf_len
    • fixed fillup to update DUMP_FLAGS to the new format
    • fix for detecting PAE in the dumps
    • fix for parsing dumps
    • add boot.lkcd script
  • Updated modutils (feature) [modutils]
    • support new /lib/modules/'uname -r' structure
    • support new override path
  • Updated nfs-utils (bugfix/feature) [nfs-utils]
    • fix statd for ha-nfs (add STATD_HOSTNAME)
  • Updated openssl (feature) [openssl] [openssl-devel]
    • add root certificate for the ICP-Brasil CA
  • Updated pam (bugfix) [pam] [pam-devel]
    • fix unresolved symbols and segfault of pam_xauth.so
  • Updated pam-modules (bugfix/feature) [pam-modules]
    • pam_pwcheck: don't print wrong error if opasswd file does not exist yet.
    • fix pam_pwcheck to not modify global PAM data.
    • backport patch for pam_unix2 which allows forcing root to change the password at next login
  • Updated parted (feature) [parted]
    • update to version 1.6.6
  • Updated pciutils (feature) [pciutils] [pciutils-devel]
    • updated pci.ids
  • Updated ps (bugfix/feature) [ps]
    • update procps to 3.1.11 and psmisc to 21.3 to work with newer kernels
    • make ps shut up when fed with wrong parameters
    • fix "#C" display problem with more than 99 CPUs
    • top: fix process size overflow at 4G
  • Updated quota (bugfix/feature) [quota]
    • update to version 3.08
    • fix path in init scripts
    • move quotacheck binary to /sbin as /usr maybe not mounted at boot.quota
  • Updated raidtools (bugfix/feature) [raidtools]
    • up to 1.00.3 (allows up to 27 disks in a set)
    • fix crash of mkraid if /etc/mtab does not exist
    • updated HowTo
  • Updated reiserfs (bugfix/feature) [reiserfs]
    • update to 3.6.10
    • make -a imply -q
  • Updated samba (bugfix/feature) [samba] [samba-client] [samba-vscan]
    • update to version 2.2.8a
    • Windows XP clients will no longer need a patch and work out of the box
    • remove tdbtorture from package on request of the Samba team
    • remove /etc/logrotate.d/samba as it conflicts with /etc/logrotate.conf
    • add patch to handle logons restrictions of userworkstations in domain security
    • move /var/log/samba and /var/run/samba to samba-client
    • add patch for smbclient to get a working -TI option
    • add nss-soname
    • add patches for smbmount; this includes LFS, unicode, escape character and 32 bit uid suppprt
    • add nmbstatus utility
    • add schannel feature from Volker Lendecke
    • move winbind init script and rc sysm link to the client package
    • remove superfluous linkvfs patch
    • activate root = administrator admin in smbusers by default
    • add smbprngenpdf
    • autocreate samba.opts.ini while build
    • add new sysconfig tags
    • cleanup %post script part which takes care of old configuration location
  • Updated scsi (bugfix/feature) [scsi] [xscsi]
    • update to scsidev-2.31
    • update rescan-scsi-bus.sh to support LUNs larger than 9
    • new option --nooptscan to always scan all LUNs, even if LUN 0 is not found in rescan-scsi-bus.sh
    • add sysconfig metadata
  • Updated scsirastools (bugfix/feature) [scsirastools]
    • update to scsirastools-1.4.3
    • 64 bit cleanliness
    • docu updates
    • sgmode: adjust format dev page if block size changes
    • sgraidmon: return value, debug log, check for last dev in raid
    • sgafte: new util
    • mdevt: grub boot images are in menu.lst
    • support for 12byte serial numbers
  • Updated shadow (feature) [shadow]
    • added laus patch for pwdutils and shadow for auditing support
  • Updated strace (bugfix/feature) [strace]
    • update to strace 4.4.98
  • Updated sysconfig (bugfix) [sysconfig]
    • fix the path to vconfig
    • set MTU after the interface is up
  • Updated sysstat (bugfix/feature) [sysstat]
    • fix for systems with more than 32 cpus and a lot of memory
    • be more descriptive in an error message
    • added LSB comments to init script
    • increased /proc/stat line size from 1024 to 8192 for systems with lots of disks
  • Updated sysvinit (bugfix) [sysvinit]
    • change detection of serial versus terminal lines
  • Updated tcpdump (bugfix) [tcpdump]
    • tcpdump-qeth wrapper script has been obsolete by libpcap workaround
  • Updated ucdsnmp (bugfix) [ucdsnmp]
    • init script has to sleep before starting the agents, not after
  • Updated unitedlinux-release (feature) [unitedlinux-release]
    • add PATCHLEVEL = 3 entry to /etc/UnitedLinux-release
  • Updated util-linux (feature) [util-linux]
    • add support for -a -O _netdev
    • add patch for noreserved option for NFS
  • Updated xf86 (bugfix) [xf86]
    • disable sis.o module in km_drm (it has unresolved symbols) and removed a bad hack in Makefile.module.
    • make sux work even if no network available
    • workaround in sux due broken gnome session managment
  • Updated xfsprogs (bugfix/feature) [xfsprogs] [xfsprogs-devel]
    • synchronization with kernel in SP3.
    • removed patch where mkfs.xfs defaults to create filesystem with block size=page size.
    • many other fixes (see CHANGES in doc directory).
  • Updated xntp (bugfix) [xntp] [xntp-doc]
    • fix bug in ntp-4.1.1-noroot.patch that made ntpd ignore an existing drift file instead of reading it.
  • Updated yast2-bootloader (bugfix) [yast2-bootloader]
    • do not prevent modules cdrom and ide-cd in initrd
    • do not add (hd9) and higher to GRUB's device map because of some problems
  • Updated yast2-mouse (bugfix) [yast2-mouse]
    • do not call XF86Mouse::update when no mouse is detected
    • prevent probing in Save function
    • do not reprobe mouse in continue mode
  • Updated yast2-online-update (bugfix) [yast2-online-update]
    • fix calling patch CD update from ncurses YaST control center
    • mark /etc/suseservers as %config(noreplace) so that it doesn't overwrite a user-generated file
  • Updated yast2-printer (bugfix/feature) [yast2-printer]
    • default queue setting without any environment variable
    • allowed queue names with upper letters
  • Updated yast2-storage (bugfix) [yast2-storage]
    • fix rounding error in displaying max lvm lv size
  • Updated ypserv (bugfix/feature) [ypserv]
    • update to version 2.9.91
    • fix problems with svc_run
2.2 Security fixes
Service Pack 3 contains all security fixes released via the maintenance Web since the GA version.
3. New packages released with SP3
The following new packages have been introduced with Service Pack 3:
  • OpenIPMI
  • OpenIPMI-devel
  • gedit2
  • gnome-terminal
  • ibmusbasm
  • laus
  • laus-devel
  • libzvt2
  • libzvt2-devel
  • mkisofs
  • mozilla
  • mozilla-calendar
  • mozilla-devel
  • mozilla-dom-inspector
  • mozilla-irc
  • mozilla-mail
  • mozilla-spellchecker
  • mozilla-venkman
  • mozilla-xmlterm
  • pam-laus
  • perl-Curses
  • perl-XML-DOM
  • perl-XML-Generator
  • perl-XML-RegExp
  • syslinux
  • ttf-arphic
  • ttf-arphic-bkai00mp
  • ttf-arphic-bsmi00lp
  • ttf-arphic-gbsn00lp
  • ttf-arphic-gkai00mp
  • wondershaper
Important Note: These packages are provided on the Service Pack 3 CDs but depending on the installation method you use these may not get automatically installed. Please use "rpm -U <PACKAGE>" to install any of these packages. The ttf-arphic* packages can be found on the second Service Pack 3 CD.
4. Support restrictions
For support of the following packages we recommend to contact the manufacturer of the respective piece of software directly:
  • IBMJava2-SDK
5. Detailed ChangeLog
The file "ChangeLog" in the toplevel of CD1 contains a summary of all the changes that were made for these updated packages. This gives you a good highlevel view of the changes and should be sufficient in most cases.
You can of course always get the very detailed technical information about any package changes from the RPMs themselves by doing
rpm --changelog -qp &lt;FILENAME&gt;.rpm
where <FILENAME>.rpm is the name of the rpm.
6. Known Bugs
  • tg3 driver and jumbo frames (MTU 9000) There is an issue with the tg3 driver when a MTU of 9000 is defined for the interface (e.g. ifconfig eth0 mtu 9000). The network connection may be lost. Please use the bcm5700 driver if you configure such large MTUs.

links to download packages

Download Source Packages

Download the source code of the patches for maintained products.


Disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.

Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.

© Micro Focus