The following ERRATA for SL 40,41,42 i386 are now available from: ftp://ftp.scientificlinux.org/linux/scientific/40,41,42/i386/errata/SL/RPMS/ Synopsis: Important: cups security update Advisory ID: RHSA-2005:878-01 CVE Names: CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 cups-1.1.22-0.rc1.9.9.i386.rpm cups-devel-1.1.22-0.rc1.9.9.i386.rpm cups-libs-1.1.22-0.rc1.9.9.i386.rpm Synopsis: Moderate: curl security update Advisory ID: RHSA-2005:875-01 CVE Names: CVE-2005-4077 curl-7.12.1-8.rhel4.i386.rpm curl-devel-7.12.1-8.rhel4.i386.rpm Synopsis: Important: gpdf security update Advisory ID: RHSA-2005:867-01 CVE Names: CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 gpdf-2.8.2-7.3.i386.rpm Synopsis: Moderate Java plugin security update Sun Alert ID: 102003 Product: j2sdk Summary: Security Vulnerabilities in the Java Runtime Environment may allow an untrusted applet to elevate its privileges http://java.sun.com/j2se/1.4.2/ReleaseNotes.html Notes: Many users will have a dead link in places like /usr/lib/firefox-1.0.7/plugins/libjavaplugin_oji.so This is a known result of the upgrade. This is because the plugin is now put in the directory /usr/lib/mozilla/plugins/ Putting the plugin in that directory works for all Scientific Linux versions of mozilla and firefox. Note that j2sdk-1.4.2_10-fcs.i586.rpm has NOT been signed by us. The license and the rpm itself do not all for it. j2sdk-1.4.2_10-fcs.i586.rpm java-1.4.2-sun-compat-1.4.2.10-1jpp.i586.rpm Synopsis: Important: kdegraphics security update Advisory ID: RHSA-2005:868-01 CVE Names: CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 kdegraphics-3.3.1-3.6.i386.rpm kdegraphics-devel-3.3.1-3.6.i386.rpm Synopsis: Moderate: perl security update Advisory ID: RHSA-2005:880-01 CVE Names: CVE-2005-3962 perl-5.8.5-24.RHEL4.i386.rpm perl-suidperl-5.8.5-24.RHEL4.i386.rpm Synopsis: Important: udev security update Advisory ID: RHSA-2005:864-01 CVE Names: CVE-2005-3631 udev-039-10.10.EL4.3.i386.rpm Synopsis: Important: xpdf security update Advisory ID: RHSA-2005:840-02 CVE Names: CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 xpdf-3.00-11.10.i386.rpm -Connie Sieh -Troy Dawson