From root@noswad.fnal.gov Wed Feb 23 11:24:04 2005
Date: Wed, 23 Feb 2005 10:42:29 -0600
From: root <root@noswad.fnal.gov>
To: csieh@fnal.gov

Scientific Linux Fermi LTS     3.0.4    i386          February 22 , 2005

compared to Scientific Linux  3.0.4
-----------------------------------------------------------------------------
Acrobat  updated

	acroread-5.010-1.i386.rpm
        acroread-plugin-5.010-1.i386.rpm

Java updated

  	 Version 1.4.2_07 fixes a security hole with the plugins.
 	 Version 1.4.2_07 works with the CD helpdesk web pages.
   
 	 We are putting in Sun's j2sdk rpm straight from Sun so that
 	 the new java from jpackage can make all the correct links to
 	 setup the java correctly
 
 		j2sdk-1.4.2_07-fcs.i586.rpm	
 
 	 The jpackage rpm java-1.4.2-sun-compat-1.4.2.07-1jpp.noarch.rpm
 	 is used to install j2sdk-1.4.2_07-fcs.i586.rpm .  It creates
 	 the proper links.  So all you should need to do to install java
 	 is 

 	    yum install java-1.4.2-sun-compat

 	 and it will install j2sdk-1.4.2_07-fcs.i586.rpm 
 
 	 The j2re-blackdown  was discontinued because it wasn't keep up
 	 with security plugins as fast as we had liked.

Mozilla updated

	With the latest security release of mozilla it was decided to
	upgrade to the latest mozilla rather than try to backport the patch.

 	mozilla-1.7.5-LTS3x.1.i386.rpm
        mozilla-chat-1.7.5-LTS3x.1.i386.rpm
        mozilla-devel-1.7.5-LTS3x.1.i386.rpm
        mozilla-dom-inspector-1.7.5-LTS3x.1.i386.rpm
        mozilla-js-debugger-1.7.5-LTS3x.1.i386.rpm
        mozilla-mail-1.7.5-LTS3x.1.i386.rpm
        mozilla-nspr-1.7.5-LTS3x.1.i386.rpm
        mozilla-nspr-devel-1.7.5-LTS3x.1.i386.rpm
        mozilla-nss-1.7.5-LTS3x.1.i386.rpm
        mozilla-nss-devel-1.7.5-LTS3x.1.i386.rpm

vnc
 	Issue with vnc allowing more than just localhost to connect by
 	default.
 
 	Vnc was patched to set the "localhostOnly" parameter to true by 
        default. Note that it is still possible to return to RISKY behavior 
        by invoking:
 
    		vncserver -localhost="no" (or 0, or "off")

 	Note that vncviewer has the new option "-via", meaning that the 
 	command line:
 
 	   	vncviewer -via <host>.fnal.gov localhost:1
 
 	will set up an SSH tunnel and use it to access the local vncserver
 	running on <host>.fnal.gov, all in one step.
 	
 	NOTE that vnc is ONLY allowed if used with a SSH tunnel onsite at
 	Fermi.  See the above info.
 
 	Thanks to Chris Green for this patched vnc.