Novell iManager
Vendor: Novell
A vulnerability was reported in Novell iManager. A remote user can conduct cross-site request forgery attacks.
Impact: Modification of user information
Alert: http://securitytracker.com/id/1028424

I promised that you would be the first to hear this, I am in the process of posting ZCM 11.2.3a and the ZDC right now - it may take a while for the process to mirror the files around the world, but you should see ZCM 11.2.3a upgrade manual import file http://download.novell.com/Download?b...Va9es8iag~
ZCM 11.2.3a ZENworks Diagnostic Center - executable and pattern file http://download.novell.com/Download?b...rYTnqi8Gc~

Thanks for bearing with us during this time, hope this weekend's good for you!

Shaun Pond
ZENworks Global Technical Support

Who is going?

http://www.susecon.com/

NOV 12-15, 2013, Lake Buena Vista, Florida

4 Days. Everything Linux.

read more

Look, I promise that one day, one of my emails will have good news...

Testing have found that if a zone has above a certain number of configured locations (no exact figure, but several hundred), the upgrade to 11.2.3a on the first Primary will grab all the java heap memory and the upgrade will crash out. This wasn't found in the initial 11.2.3 testing, as they only created about a hundred locations, but the enhanced testing they've done recently revealed this. This was found right at the end of the testing cycle, which was bad timing for all of us: I was all set to release 11.2.3a yesterday! :(

So I apologize, we won't have 11.2.3a this week, but we're getting close (yeah, I know that's not a great deal of help, sorry, but at least you know we're not keeping you in the dark and feeding you vague promises).

At the start of next week, I'll give you an update, but engineering told us yesterday that it should only be a few days to retest (with a large number of locations, the upgrade can take well over an hour, so the tests do take a while to run, and must be done multiple times).

Hope you have a good weekend :)

Shaun Pond
ZENworks Global Technical Support

read more

Novell ZENworks
Vendor: Novell
A vulnerability was reported in Novell ZENworks Configuration Management. A remote user can upload arbitrary files to execute arbitrary code on the target system.
Impact: Execution of arbitrary code via network
Alert: http://securitytracker.com/id/1028337

http://arstechnica.com/information-te...-16-years/

NetWare 3.12 server taken down after a decade and a half of duty.
by Peter Bright - Mar 29 2013, 1:55pm CDT

It's September 23, 1996. It's a Monday. The Macarena is pumping out of the office radio, mid-way through its 14 week run at the top of the Billboard Hot 100, doing little to improve the usual Monday gloom.

read more

http://download.novell.com/Download?b...1eUKjkM8w~

This is an interim release of the Novell Client 2 SP3 for Windows. It includes fixes for problems found after the Novell Client 2 SP3 for Windows was released. This is a full client package, not just a subset of files.

read more

Well I'm sorry that it's always bad news that I'm sending out at the moment, but I wanted to give you an update as soon as I had it. The testing of the new fixes that's been going on has uncovered an issue that could compromise the "single reboot" scenario when upgrading, and because it's an issue with kernel-level drivers, any problem would result in a BSOD so our test teams are being ultra-careful. The inevitable result of this is, I'm afraid, further delays. We do not expect to have 11.2.3a available this week, so from that point of view at least, we can relax for a few days. I know that this is a disappointment to us all, but I thought it was only fair to keep you in the picture as far as possible. I'm also updating the ZENworks News items in ZCC for people who didn't get hold of the original 11.2.3: if you don't see an item regarding 11.2.3 in ZCC, check http://www.novell.com/support/kb/doc....id=7011998 if your server's running on Linux, and if you still don't see news after that, please let me know.

More news as soon as I receive it.

Shaun Pond
ZENworks Global Technical Support

Previous emails below:

read more

Can anyone confirm this indeed works with OES11(sp1) now?

http://www.symantec.com/business/supp...TECH201596

Backup Exec 2012 revision 1798 Hotfix 201596 , Device Driver Installer DDI20121215 (December 15th, 2012) II
NOTE: This Hotfix supersedes the previous released Hotfix 199190 , Device Driver Installer DDI20121215 (December 15th, 2012).

Issue(s) Resolved
- Backup Exec support of Novell OES11 (NSS Only).

Post requisites
- A full backup is required after installing this hotfix.
- Remote Agent for Linux/Unix/Macintosh Servers (RALUS/RAMS) will need to be updated after installing this hotfix.

Full text below:

read more