Novell Linux Desktop 9 Service Pack 3 Release Notes

December 22, 2005
1.0 Known Issues Fixed in NLD 9 SP3
2.0 Installing NLD 9 SP3
2.1 Hardware Requirements
2.2 Installing NLD 9 SP3
2.3 Installing NLD on an AMD64-based Machine
2.4 Updating NLD 9 to SP3
2.5 Supported Languages
3.0 Known Issues
3.1 Detecting Monitors Correctly during Installation
3.2 Download Failed Error When Updating NLD Using Red Carpet
3.3 netapplet Incompatible with Some Wireless Drivers
3.4 MetaFrame XP Applications
3.5 OpenOffice.org Known Issues
3.6 iFolder 2.1.6 Issues
3.7 Accessibility Themes
3.8 Monitor Reporting Error
3.9 Power Management Issues
3.10 Printing from Firefox
3.11 Mounting Remote Windows Filesystems via the Command Line
3.12 Changing Your KDE Language When Logged Into GNOME
4.0 Evolution
4.1 Exchange Connector
4.2 Evolution Issues
4.3 Exchange Issues
5.0 International Issues
5.1 Root User Authentication to the International NLD KDE Desktop
5.2 Root User Authentication to the International NLD GNOME Desktop
5.3 International Language Dual Desktop Environment (GNOME/KDE)
6.0 Release Notes of Base System
6.1 New or Updated Features
6.2 Known Issues Fixed
6.3 Security Fixes
6.4 Known Issues
7.0 Online Documentation
8.0 Legal Notices


1.0 Known Issues Fixed in NLD 9 SP3


2.0 Installing NLD 9 SP3


2.1 Hardware Requirements

The minimum hardware requirements for running NLD SP3 are as follows:

  • Personal computer with a Pentium* II or higher processor, or any other AMD64 for Intel* EM64T processor, and a bootable CD-ROM drive
  • 1 or 2 physical CPUs
  • 4 GB hard disk space when installing the default GNOME or KDE desktop but not more than 8 TB.

    8 GB is recommended if installing both GNOME and KDE desktops, or additional software selections.

    IMPORTANT:  We do not recommend installing all packages because it might cause a conflict between packages that should not be installed concurrently.

  • 128 MB RAM (256 MB recommended, not more than 64 GB)
  • Super VGA display adapter.
  • Network card (if you will be connecting to a network)
  • BIOS and network hardware supporting network boot (if you plan on doing a remote mass deployment)
  • USB, PS/2*, or serial mouse
  • Screen resolution of at least 1024 x 768 recommended


2.2 Installing NLD 9 SP3

This section describes how to perform a new installation of NLD 9 SP3 using the CDs or DVD. To update an existing NLD 9 system to NLD 9 SP3, see 2.4 Updating NLD 9 to SP3.

For additional instructions on installing NLD, see the Novell Linux Desktop Quick Start or quickstart-en.pdf at the root of the Novell Linux Desktop CD1 or DVD.


2.2.1 Installing Using CDs

Use the bootable CD to perform a new install of NLD 9 SP3. You will need access to the original NLD 9 CDs or DVD in order to complete the installation.

  1. Insert NLD 9 SP3 CD 1 in your drive and boot your machine.

    A boot screen similar to the original installation of NLD 9 is displayed.

  2. Select Installation to boot the SP kernel from CD.

    The kernel will load and the following dialog will appear:

    "Make sure that CD number 1 is in your drive."

  3. Insert the original NLD 9 CD 1, then click OK to run the regular installation.

  4. Complete the normal NLD installation steps, such as accepting the license agreement, and selecting a language, default desktop, and other installation settings.

    HINT:  If you get an error message during the media installation indicating that a certain file couldn't be installed, skip that file and continue to the end. Then run the update again. During the reinstall, only the skipped packages will be installed.

  5. Click Yes, Install to start the installation.

  6. Insert NLD 9 SP3 CD 1 when prompted, followed by NLD 9 SP3 CD 2.

  7. When prompted, insert the original NLD CD 1 again, followed by the original NLD 9 CD 2 and 3.

  8. Continue as usual with the installation (entering a password for root, network configuration, testing your internet connection, activating the ZENworks® Online Update Service, user authentication method, and user name and password).

If you have to install many machines, we recommend booting off of the SP3 CD and using a network install server.


2.2.2 Installing Using the DVD

Use the bootable DVD to perform a new install of NLD 9 SP3.

  1. Insert the NLD 9 SP3 DVD in your drive and boot your machine.

    The NLD 9 boot screen is displayed.

  2. Select Installation to boot the SP kernel from the DVD.

    The kernel will load and then the installation program will start.

  3. Complete the normal NLD installation steps, such as accepting the license agreement, language, default desktop, and other installation settings.

  4. Click Yes, Install to start the installation.

  5. Continue as usual with the installation (entering a password for root, network configuration, testing your internet connection, activating the ZENworks® Online Update Service, user authentication method, and user name and password).


2.3 Installing NLD on an AMD64-based Machine

After what appears to be a successful installation of NLD on an AMD64-based machine, the operating system freezes on init. Setting the following kernel parameter provides a workaround for this issue:

acpi=off


2.4 Updating NLD 9 to SP3

You can update an existing NLD 9 installation (the original release, NLD 9 SP1, or NLD 9 SP2) to NLD 9 SP3 in any of the following ways:


2.4.1 Updating NLD 9 Using Red Carpet

Use Red Carpet to install the packages that will update an existing NLD installation to NLD SP3. An update notice is shown only for software you already have installed that is in a channel to which you are subscribed, and for which there is a newer version than what you already have.

  1. Start the Red Carpet client:

    GNOME: Click System > Software Update.

    KDE: Click N > System > Configuration > Red Carpet.

  2. If you are not logged in as root, enter the root password, then click OK.

  3. To update to SP3, click Update All on the Updates tab.

  4. After Red Carpet finishes the dependency check, click Continue to install the updated packages.

    When the update is finished, the Update tab will show that your system is up-to-date.


2.4.2 Updating NLD 9 Using the SP3 CDs

  1. In a running NLD system, insert the NLD SP3 CD 1 in your CD drive, then click Yes when the hardware detection notice appears.

    NOTE:   If the CD isn't autodetected, try reinserting it. If autodetect continues to fail, click System > Administrator Settings > Software, then click Patch CD Update.

  2. If you are not logged in as root, enter the root password when prompted.

    The YaST Online Update dialog appears.

  3. Click Next to begin the update process.

    The Download and Installation log will track update progress.

    HINT:  If you see a patch installation error message at any time during the update, click Skip Patch, complete the update, then repeat the update process to install the skipped packages. Only the skipped packages will be installed when the process is repeated.

  4. When prompted for the YOU Patch CD CD2, insert NLD SP3 CD2, then click OK.

  5. Click Finish when you see Installation Finished reported near the end of the progress log.

  6. If you skipped patches, repeat this update process.


2.4.3 Updating NLD 9 Using the SP3 DVD

  1. Insert the NLD 9 SP3 DVD in your drive and reboot the machine.

  2. Select Installation from initial boot menu.

  3. Type suse_update.

    Text will appear on the Boot Options line near the bottom of the screen.

  4. Press Enter.

  5. After the YaST installation program starts, click I Agree to accept the license agreement.

  6. Select a language, then click Accept.

  7. Select Update an Existing System, then click OK.

  8. A list of the partitions on the computer's hard drive is displayed. Select the partition with the existing Novell Linux Desktop 9 (NLD 9) installation that you want to upgrade, then click OK.

    IMPORTANT:  YaST will list all partitions that have a Linux distribution installed. Upgrading from an existing NLD 9 installation is the ONLY option that is supported by Novell. Updating from any other distribution, including SUSE Linux, is NOT supported and is unlikely to work.

  9. Verify that the installation settings are correct, then click Accept.

  10. Click Yes, Update to start updating the package versions on the selected partitions.


2.5 Supported Languages

The supported languages for this release of Novell Linux Desktop include English, French, German, Italian, Spanish, Brazilian-Portuguese, Chinese-Simplified, Chinese-Traditional, and Japanese.

NOTE:  Novell also conducted best effort to include Polish localization in this release.


3.0 Known Issues


3.1 Detecting Monitors Correctly during Installation

In some cases, monitors are not detected correctly when NLD is installed to a computer that is sharing a monitor through a switch box. This has also been shown to prevent the graphic mode of YaST from starting. In less severe cases, the installation of NLD is successful, but the monitor is not detected and defaults to a resolution of 640 x 480. On the installation screen (before selecting an installation option), press F2 and select a different resolution. If you select a resolution that is too high, you will get an out of range error or the screen will be blank.

If you are using a switch box and get an X server error, try installing while using a dedicated monitor with the computer you are installing to.

If you have installed successfully but a generic monitor has been installed and the resolution has defaulted to 640 x 480, you must manually identify your monitor and reset the resolution. If you cannot reset the resolution to higher than 640 x 480, we recommend using the text mode.


3.2 Download Failed Error When Updating NLD Using Red Carpet

Occasionally, when updating NLD using Red Carpet, the following error appears:

Download Failed, IO Error

To work around this issue, close the error message and click Refresh on the Red Carpet toolbar. Then click Run Now again and the update transaction should resume.


3.3 netapplet Incompatible with Some Wireless Drivers

The netapplet program is incompatible with some wireless drivers.

  • Some Airo network cards or their drivers are incapable of measuring the strength of wireless access points. For those cards, netapplet displays the strength of the access points as zero.
  • Some Atheros network cards or their drivers are incapable of detecting when the current access point has gone away. For those cards, netapplet is not able to intelligently fall back on another access point.
  • Some Orinoco network cards or their drivers are incapable of scanning for access points. For those cards, netapplet is not able to provide a list of available access points. To switch networks, type the network name into the field after clicking "Other..."


3.4 MetaFrame XP Applications

MetFrame XP NFuse/Presentation Server applications are not, by default, associated with the Citrix ICA Client. The associated application is: /usr/lib/ICAClient/wfica


3.5 OpenOffice.org Known Issues

  • Evolution / LDAP integration can cause long application delays for unresponsive servers.
  • OpenOffice.org won't open password protected files.


3.6 iFolder 2.1.6 Issues


3.6.1 General Issues

  • Do not use special characters such as " ` \ * in files or directory names in an iFolder directory.
  • If the iFolder location is a remote filesystem, then it should be in the user's home directory.
  • If you create a FAT32 partition and share the iFolder store from Windows and Linux on this partition (thus eliminating the need to duplicate data), iFolder corruption could occur.


3.6.2 Sync Related Issues

  • If a user has read access for a file but read and execute permission for the directory, the file and directory are synchronized.
  • If there are two files or directories with the same name, but in different cases, the synchronization behavior is not known. For example, if the files with the names doc1 and DOC1 exist, then the synchronization behavior is not known.
  • At times, the iFolder Client might crash during sync.


3.6.3 iFolder Places .desktop file in ~/Desktop Instead of an Actual Link

iFolder uses a .desktop file to represent iFolder on the desktop. Because of this, some programs will not recognize iFolder on the desktop. If you want something that will be visible in file selectors, create a symlink in ~/Desktop and remove the iFolder .desktop file.


3.6.4 Running the iFolder Client While Logged In With a Local User ID Containing Uppercase Letters

If you log in to a local Linux workstation with a username that contains uppercase letters then try to run the iFolder client, you might get an Invalid Port = 0 error. When you create your username, YaST warns you that some e-mail systems might have issues with usernames that contain uppercase letters, but it will still let you create the username.


3.7 Accessibility Themes

Certain accessibility themes will change fonts when selected in the theme selector. To fix this, click System > Personal Settings > Fonts and return the fonts to your desired settings.


3.8 Monitor Reporting Error

With some monitors, you might receive the following warning dialog:

"Your monitor didn't report its X- and Y-Size, this might cause display problems like unreadable fonts."

This is generally harmless and you can ignore it, but we encourage you to enter your correct screen size in SAX2 and to log a bug so that the monitor information can be added to the database.


3.9 Power Management Issues


3.9.1 Suspending a Laptop

With the new kernel 2.6, standby/suspend is now supported with ACPI. Note that this feature is still experimental and is not supported by all hardware. To use it, you need the powersave package. Further information about the package can be found at /usr/share/doc/packages/powersave. A graphical front end can be found in the kpowersave package.

To suspend a laptop, perform the following steps as root:

  1. mv /etc/sysconfig/powersave/common /etc/sysconfig/powersave/common.orig

  2. cp /usr/share/doc/packages/powersave/contrib/common_ACPI\ /etc/sysconfig/powersave/common

  3. sed -i \ 's/DISABLE_USER_SUSPEND=no/DISABLE_USER_SUSPEND=yes/' /etc/powersave.conf

  4. rcpowersaved restart

You can use the following command (which you can run as a regular user) to test if it works:

powersave --suspend

NOTE:  You might see warning messages printed on the screen, but you can ignore them.

If you are using GNOME, right-click on the batt-stat applet and choose "Suspend Computer..." to do the same thing.


3.9.2 powersave Daemon Causes Machine to Lock Up

Certain VIA Ezra CentaurHauls processors and their associated south bridges can result in machine lock up in certain circumstances, primarily those related to power management. For this reason, the powersave daemon is disabled by default. If you want to use the powersave daemon, we recommend contacting your hardware vendor for a possible hardware or BIOS upgrade.


3.10 Printing from Firefox

Firefox (and other applications) outputs Postscript Level 3 when printing. Some older printers cannot handle Level 3. If you get an error page from the printer saying that the Postscript interpreter in your printer is older than the version required, you need to modify your printer configuration.

Select a filter that will convert the output from Firefox to either Postscript level 2 or 1 depending on what you printer can handle. You can do this in the specific printers Properties. Change the "GhostScript pre-filtering" option to "Convert to PS level 2." Try changing it to "Convert to PS level 1" if you still get the same error.

Some printer drivers do not have this option. If the one you are using does not, try a different driver for your printer. If all else fails, use the Generic Postscript printer driver.


3.11 Mounting Remote Windows Filesystems via the Command Line

The following item only pertains to you if you are mounting remote Windows filesystems directly, via the command line. The common manner of using Windows shares---from your desktop---is unaffected by the following.

The preferred filesystem when using the mount(1) command to mount a remote Windows share is "cifs" instead of "smbfs," which is not supported. To mount a remote Windows share from the command line, use the following syntax:

mount -t cifs [-o <options>] '//server/share/' mount-point

For example:

	mount -t cifs '//monopoly/c$' /media/windows

This will mount the "c$" share at "/media/windows" on the "monopoly" machine via CIFS.


3.12 Changing Your KDE Language When Logged Into GNOME

When using KDE applications when you are logged into GNOME (including the NLD Help Center, CD burning tool, and Run as Root dialog), the application uses the language set in KDE. This defaults to the language chosen during installation.

To change the default language for the entire system, run YaST (System > Administrator Settings in GNOME.). Click System > Choose Language. This change is persistent across reboots and across all users, but can be overridden by individual user selections.

To change this for the current user when logged into GNOME, run kcontrol (using the terminal or System > Run Program). In the KDE Control Center, click Regional & Accessibility > Country/Region & Language. Add the language you want to use to the top of this list. If the language you want to add is not present in this list, you must first install the kde3-i18n package corresponding to this language.


4.0 Evolution


4.1 Exchange Connector

The Exchange Connector enables you to connect Evolution to Microsoft* Exchange. Novell Linux Desktop includes Exchange Connector 2.0.


4.1.1 Exchange Connector Version

In order to use the Exchange Connector with Evolution, you must install version 2.0 for both the Exchange Connector and for Evolution. The Exchange Connector is included with NLD, but is not part of the base installation.


4.1.2 Exchange Connector Requirements

The Exchange Connector works with Exchange 2000 and Exchange 2003. In addition, it requires that Outlook* Web Access be enabled.


4.2 Evolution Issues


4.2.1 No Support for Inline PGP or GPG

Currently there is no support for messages that use PGP/GPG encoding in the text/plain part of a message. However, Evolution does support PGP/GPG when a message has its own specific MIME type.


4.2.2 Evolution Might Become Unresponsive When Loading a Remote Calendar

When loading a remote calendar, Evolution might become unresponsive.


4.2.3 Using the "Show Only Subscribed Folders" Setting

If you toggle the "Show only subscribed folders" setting when editing an IMAP account, you must restart Evolution in order for the setting to take effect.


4.3 Exchange Issues


4.3.1 Authentication in Calendar/Tasks/Contacts Components

If the Remember Password option is not enabled, you must authenticate either through the Exchange Component or the Mailer Component before using the Calendar/Tasks/Contacts Components.


4.3.2 Exchange Component Required for Folder Operations

You cannot use folder operations such as Create/Delete/Modify for Calendar/Tasks/Contacts in a component other than the Exchange Component.


4.3.3 Authentication Failures to Exchange

If the Exchange server is restarted when connected to Evolution, you might receive authentication failures. To resolve the problem, open a terminal window and enter evolution --force-shutdown at the command prompt, and then restart Evolution.


5.0 International Issues


5.1 Root User Authentication to the International NLD KDE Desktop

Authentication to the international KDE desktop with root user credentials results in several applications reverting to U.S. English. Examples include Red Carpet, Sax2, and Novell iFolder. This functions by design as the root LANG environment variables are unassigned by default in NLD. This system default is required to ensure that all third-party services function correctly.

HINT:  Launch an instance of the shell and input the locale command to view the default root LANG environment variables.

Perform the following steps to set the locale environment variables for root to be identical to that of the other users.

  1. To start YaST, click the red N on the bottom panel, then click System > YaST.

  2. In YaST, click System > Choose Language > Details.

  3. In the Locale Settings for User Root drop-down list, click Yes.

  4. Click OK > Accept > Close.

  5. Reauthenticate to the KDE desktop with root user credentials.


5.2 Root User Authentication to the International NLD GNOME Desktop

The LANG environment variables are unassigned when authenticating to the international NLD GNOME desktop with root user credentials. The international GNOME desktop resources can be invoked manually by performing the following steps.

  1. Click the Language menu displayed on the GNOME Login dialog.

  2. Click the required language, then enter the root username.

  3. Enter the root password in the password input field.

  4. Choose to apply these language settings Just For This Session or Make Default by selecting the appropriate option.

    The international GNOME desktop resources appear when authenticated as the root user.

Failure to employ this language selection will result in the display of the U.S. English GNOME desktop.


5.3 International Language Dual Desktop Environment (GNOME/KDE)

The dual installation method facilitates the display of the international GNOME and KDE desktops when authenticated as any user, including root.

If a dual desktop machine is mandatory, perform the following steps when commencing the installation of NLD:

  1. Follow the installation as normal until the Select Your Default Desktop installation window appears, then click the GNOME radio button.

  2. Click Change > Software on the Installation Settings screen.

  3. Click Detailed Selection, then click the checkbox next to KDE - The KDE Desktop.

    All additional options should remain unchanged.

  4. Click Accept and then proceed with the installation in the typical manner.

    Upon completion of the installation, the authentication dialog appears.

  5. Click Sessions and note the availability of both the GNOME and KDE desktops.

  6. Click the required desktop and authenticate using the appropriate login credentials.

    The international GNOME and KDE desktops will now be available, irrespective of the user credentials (root/non-root) used for authentication.


6.0 Release Notes of Base System


6.1 New or Updated Features

  • Added compat-libstdc++-lsb for LSB 3.0 conformance.
  • Updated freeradius to version 1.0.5.
  • Updated gcc (added -mtrap-int-div option and traps on div by zero)
  • Updated ibmasm to version 3.0.
  • Added ipmitool.
  • Updated iprutils to version 2.0.15.4.
  • Updated kdebase3 in order to make smb:// make use of kerberos authentication.
  • Updated lsb.
  • Added ltrace.
  • Added memtest86.
  • Added mpt-status.
  • Updated openssl to add AES support for the ibmca engine.
  • Added pam_ldap version 169.
  • Added perl-DBD-SQLite version 1.09.
  • Added quagga to make SNMP support configurable (backport from 0.97.2).
  • Updated scsi to sg3_utils-1.16.
  • Added update-alternatives version 1.8.3.
  • Added vlock.
  • Updated xntp to enable ntp-keygen by adding openssl{,-devel} to #nfb.
  • Added xsupplicant version 1.2.1.
  • Updated yast2-core to make the two functions YouUpdatesAvailable and YouSecurityUpdatesAvailable available in YCP.


6.2 Known Issues Fixed

  • Updated aaa_base (added HTTPS_PROXY handling and replaced lynx with w3m as the default).
  • Updated autoyast2:
    • Fixed the cloning of the base resources.
    • YaST autoinstallation Repository help now matched prompts.
    • Rules are now not always used, even if filename is specified.
    • Retrieving control file from FTP server now works.
  • Added cpio.
  • Updated cyrus-imapd.
  • Updated device-mapper:
    • Increased ioctl buffer size from 16k to 256k to allow larger number of dm device visible by "dmsetup ls" and "dmsetup table."
    • Added patch that avoids crash when wrong command line parameters are used with dmsetup.
  • Updated drbd to 0.7.13:
    • Allows read access to the secondary via "disable_bd_claim."
    • /proc/drbd now uses seq_file for larger numbers of devices.
    • Fixed race conditions.
    • Fixed reconnection scenarios.
    • Fixed online resizing.
  • Updated e2fsprogs to version 1.38.
  • Updated evms:
    • Added gui-unselectable-row.patch.
    • Added can_umount.patch.
  • Updated glibc:
    • Updated timezone data from glibc 2.4 CVS head.
    • Updated to current glibc 2.3 CVS head.
    • Fixed invalid CFI.
    • Added setjmp/longjmp bugfix for PPC.
    • Built and installed ja_JP.SHIFT_JISX0213 locale.
    • Updated time functions and timezone data.
  • Updated hotplug:
    • Moved hotplug to boot.d.
    • Only call devmap_name for 'add' events.
  • Updated hwinfo:
    • Better support for virtual i/o hardware on ppc.
    • i915 x11 and x11 driver update.
    • mpt fusion driver update.
    • Look at smbios data for smp detection.
    • Find xen network cards.
    • hwscan probes for less things on s390.
    • Fixed access to undefined memory.
    • Fixed unaligned accesses.
    • Updated forcedeth info.
  • Updated kdebase3-SLES to fix an installation failure (not able to accept second CD).
  • Updated km_novfs.
  • Added kpowersav to:
    • Prevent the icon under GNOME from disappearing.
    • Prevent a crash if neither acpi nor apm is supported.
    • Avoid lost icon after any icon changes in GNOME.
  • Added laus.
  • Updated libica to libica 1.3.6 and changed the default value from 0 to -1 in rcz90crypt.
  • Updated libredcarpet to version 2.4.8 to do access rpmdb on OES.
  • Updated libsoup to version 2.2.3:
    • Added libsoup-2.2.3-tambet-gpointer-lameness.patch.
    • Added libsoup-2.2.3-danw-tambet-threading.patch.
    • Fixed memory leak.
    • Added patch for close exec.
  • Updated linuxrc to add ZenWorks config options and 'BrokenModules' entry to install.inf.
  • Updated lvm2 to version 2.01.14.
  • Updated mailman:
    • Removed Nimda virus test file.
    • Fixed check_perms.
    • Added support for logrotate.
  • Updated man-pages on UDP fragmentation (udp.7).
  • Updated mkinitrd:
    • Fixed ldd output parsing.
    • Added /tmp directory to the initrd.
    • Fixed display of bootsplash resolutions.
  • Updated module-init-tools to handle EINTR from {init,delete}_module and lock the module file before checking its presence in kernel.
  • Updated multipath-tools to 0.4.5:
    • Re-ordered boot.multipath to start after hotplug.
    • Fixed broken usage of self-defined syscall.
    • Fixed kpartx DASD partition support.
    • Added 'directio' path checker.
    • Added support for S/390 DASD (PAV enablement).
  • Updated nagios-plugins.
  • Updated net-snmp to 5.1.3.1.
  • Updated nfs-utils to be able to umount an unused exported file-system and modified nfs-server script to support uml case.
  • Updated ocfs2-tools to 1.1.4 to fix signedness issues.
  • Updated openCryptoki to 2.1.6.
  • Updated openhpi to 2.2.0.
  • Updated OpenIPMI to 1.4.19.
  • Updated openldap2 to allow start_tls while chasing referrals.
  • Updated openslp to fix poll code for mdns queries.
  • Updated openssh to version 4.1p1.
  • Updated pciutils to update pci.ids and show memory region in bus-centric and cpu view correctly.
  • Added pidentd to:
    • Fix ipv6 support.
    • Fix rewind(3) issue and examining local connections in both directions.
    • Redirect std* streams to /dev/null in init script.
    • Fix mazy syslog messaged with "buffer overflow" and compilation warnings.
  • Updated powersave to fix wm_shutdown function for the case users are not allowed to shut down the machine via KDM, add shutdown and reboot functions.
  • Added ppp to fix a 64 bit issue in sha1 digest code needed for MPPE.
  • Added pwdutils to update libnscd code to work correct with newer nscd versions and added hack for broken large NIS group splitting.
  • Updated quota to add support for reiserfs mounted by label.
  • Updated rcd to version 2.4.8:
    • Added rcd-2.4.8-tambet-ref-before-idle.patch.
    • Added rcd-2.4.8-maw-max-downloads.patch.
    • Updated rcd-2.4.8-tambet-memory-management-95454.patch.
    • Added patch for memory management.
  • Updated rcd-modules to version 2.4.8.
  • Updated red-carpet:
    • Added red-carpet-2.4.4-tambet-idle-callback-higher-priority-72963.patch.
    • Added red-carpet-2.4.4-tambet-show-licenses-98024.patch.
    • Added patch to handle YOU messages.
  • Updated rsh to avoid setting handlers for signals used by NPTL and support large files.
  • Updated rstatd to version 4.0.
  • Updated rsync to fix 4g rollover bug.
  • Updated samba to 3.0.20.
  • Added seccheck to fix regex for group file parsing.
  • Updated sysconfig.
  • Updated tiff to fix 64bit bug in ppm2tiff.
  • Updated udev to parse pre-SCSI code page 0x83 automatically and to parse EMC Symmetrix pre-SCSI3 code page 0x83.
  • Updated util-linux to backport heuristics for detecting what is disks in /proc/partitions from util-linux-2.12q.
  • Updated XFree86.
  • Updated xfsdump to fix ENOSPC errors on write.
  • Updated yast2-bootloader.
  • Updated yast2-installation.
  • Updated yast2-ncurses so that it doesn't crash on pressing Esc in AskForExistingDirectory.
  • Updated yast2-nis-server to allow hostnames in slave server list.
  • Updated yast2-packager.
  • Updated yast2-samba-server to no longer change SID when editing LDAP.
  • Updated yast2-sound to fix the database for updates of HDA driver.
  • Updated yast2-users to correctly set "encrypted" flag during cloning.
  • Updated ypbind to make error handling more robust.


6.3 Security Fixes

  • Updated acroread to version 7.0.1 for security issue. .
  • Updated apache (CAN-2005-2088: If a request contains both Transfer-Encoding and a Content-Length, remove the Content-Length, stopping some HTTP Request smuggling attacks).
  • Updated apache2 (CAN-2005-2728, CAN-2005-2700, CAN-2005-2491, and CAN-2005-2088, CAN-2005-1268).
  • Added arc to fix permissions of temporary file (CAN-2005-2945) and temporary file creation (CAN-2005-2992).
  • Updated clamav to version 0.87 to fix several security holes.
  • Added dhcpcd security fix so that a malformed DHCP packet can't make dhcpcd read beyond the end of a buffer and therefore possibly crash.
  • Updated ethereal to version 0.10.12 (CAN-2005-2360, CAN-2005-2361, CAN-2005-2362, CAN-2005-2363, CAN-2005-2364, CAN-2005-2365, CAN-2005-2366, and CAN-2005-2367) and moved /etc/{manuf,diameter} to /usr/X11R6/share/ethereal.
  • Added fam to support large files for 32bit enviroments.
  • Updated fetchmail to fix buffer overflow with long UIDL (CAN-2005-2355).
  • Added gnutls to fix remote DOS vulnerability.
  • Updated heimdal:
    • Fixed overflow in getterminaltype in telnetd.
    • Fixed SLC+ENV overflow in telnet.
  • Updated kdelibs3 to render utf8 characters in xterm title bar correctly (CAN-2005-1920).
  • Updated liby2util to fix possibly world writable install cache directory and potential buffer overflow when assigning Pathnames.
  • Updated mysql to fix buffer overflow with long function names (CAN-2005-2558).
  • Updated mozilla (CAN-2005-2701, CAN-2005-2702, CAN-2005-2703, CAN-2005-2704, CAN-2005-2705, CAN-2005-2706, and CAN-2005-2707).
  • Added netpbm to fix problem on bigendian and to call ghostscript with the -dSAFER option.
  • Added pam_krb5 to:
    • Fix timeout problem.
    • Fix previous security update which broke interoperation with afs.
    • Fix pam_krb5 crash due to uninit var and UID clashes on ticket file.
  • Added pam-modules.
  • Added pcre to fix heap overflow.
  • Added perl-Compress-Zlib (CAN-2005-2096).
  • Updated php4 to fix XML RPC command injection (CAN-2005-1921).
  • Updated ruby to arbitrary command execution on XMLRPC server (CAN-2005-1992).
  • Updated squid (CAN-2005-2794, CAN-2005-2796, CAN-1999-0710, CAN-2005-0718, CAN-2005-0626, CAN-2005-1345, and CAN-2005-1519).
  • Updated zlib to fix memory corruption problems (CAN-2005-1849 and CAN-2005-2096).


6.4 Known Issues


6.4.1 Konqueror: kio_slp

In NLD's KDE desktop environment, the new network browser shown on the desktop can be used to display and use services based on SLP and MDNS. Apart from the service:/ URLs, the following types are also supported: slp:/ (to browse SLP services) and mdns:/ (to browse multicast-DNS services).


6.4.2 SSH and Terminal Applications

When using remote access (notably SSH, Telnet, and RSH) between NLD (in its default configuration with UTF-8 enabled) and older versions of the underlying SUSE® Linux Enterprise Server (9.0 and earlier, where UTF-8 is not enabled by default or not supported), terminal applications might display garbled characters.

This is because OpenSSH does not forward locale settings, so system defaults are used which might not match the remote terminal settings. This affects text mode YaST and applications run remotely as nonroot user. The applications run as root are affected only when the user changes the default locales for root (only LC_CTYPE is set by default).


6.4.3 Applications Using ncurses

If problems occur with ncurses-based applications running on the text console, simply issuing unicode_stop (reverting keyboard and console from Unicode* mode) should provide a fix.


6.4.4 Pthreads/Linuxthreads

SUSE LINUX 9.1/SLES 9/NLD 9 SP3 features a new pthread implementation called NPTL, which is faster and better than the old implementation called linuxthreads.

If your old program is incompatible with this new threading implementation, we also provide the old one. To switch to the old version, set the environment variable LD_ASSUME_KERNEL to 2.4.21 by using, for example, export LD_ASSUME_KERNEL=2.4.21 in bash.


6.4.5 Wireless LAN Cards

Some wireless LAN cards (PrismGT, Centrino, Atmel, ACX100) need firmware to operate. Due to licensing issues, we cannot ship these firmware binaries. Please read /usr/share/doc/packages/wireless-tools/README.firmware for information on how to obtain and install the firmware.


6.4.6 X Server Does Not Listen on Port 6000

Fresh Novell Linux Desktop installations default to a secure setup of the system to limit possible security concerns to the bare minimum. The ongoing development of the product results in improvements that are not always visible, but that are useful for security. This text is to inform you that the X Server does not listen on port 6000+/tcp any more.

The X Window System uses TCP protocol starting at port 6000, plus the display number used in the X session, to allow for a client to display its window over a network connection, thereby providing network transparency for the X Window System. While using reasonably strong authentication methods to approve or reject client connections which default to deny access to the display, the X Server still exposes port 6000+/tcp on the network. While the use of bare, unencrypted X Windows network protocol can be considered secure enough on a trusted network, it is not reasonable to even offer the service on an untrusted/hostile network environment. Therefore, the new setup defaults to not listen on port 6000+/tcp any more.

As a side effect, one of the two authentication mechanisms in X Windows, the host based authentication using the xhost(1) command, becomes nearly meaningless as only clients that make use of the (local) unix domain socket can connect to the X Server, regardless of the list of remote hosts displayed by the xhost command. The cookie-based X Windows client authentication method remains unchanged.

This means that the command xhost +<hostname> allows clients executed by users not in possession of the necessary credentials for other authentication methods can connect to the Xserver only when started locally (that is, on the same machine the X server runs on).

Network transparency is one of the key strengths of the X Window System, and despite the change in the default setup, there is no need to abstain from it. Either you revert the change on your system by changing the variable DISPLAYMANAGER_XSERVER_TCP_PORT_6000_OPEN in /etc/sysconfig/displaymanager, or you use the ssh command from the openssh package to log on to a remote system. The ssh utility allows for the forwarding of X client connections through the encrypted ssh connection, without the need to set DISPLAY variables or the use of the xhost command. The use of ssh with X11 client connection forwarding is the recommended method to make use of the network transparency of the X Window System.


7.0 Online Documentation

For the Novell Linux Desktop online documentation, see http://www.novell.com/documentation/nld/index.html.

For the most recent NLD SP3 readme file, see http://www.novell.com/documentation/nld/readme/nld_readme_sp3.html.


8.0 Legal Notices

Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export, or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. Please refer to www.novell.com/info/exports/ for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals.

Copyright © 2004-2005 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc. has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed at http://www.novell.com/company/legal/patents/ and one or more additional patents or pending patent applications in the U.S. and in other countries.

Novell, NetWare, SUSE, Red Carpet, iFolder, ZENworks, and GroupWise are registered trademarks of Novell, Inc. in the United States and other countries.

Evolution is a trademark of Novell, Inc.

All third-party trademarks are the property of their respective owners.