augeas security, bug fix, and enhancement update

1.0.0-5 - Don't package lenses in tests/ subdirectory. related: rhbz817753 1.0.0-4 - Rebase to Augeas 1.0.0 resolves: rhbz817753 - Add dependency on libxml2-devel. - Remove all patches all upstream and included in 1.0.0. - Print tests/test-suite.log when the tests fail. - Add fix for regression...

thunderbird security update

17.0.10-1.0.1.el64 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 17.0.10-1 - Update to 17.0.10 ESR...

krb5 security update

1.10.3-10.3 - pull up fix for UDP ping-pong flaw in kpasswd service CVE-2002-2443,...

mesa security update

6.5.1-7.11 - CVE-2013-1993 - buffer overflows in DRI protocol 963066...

libvirt security and bug fix update

0.10.2-18.0.1.el64.5 - Replace docs/et.png in tarball with blank image 0.10.2-18.el64.5 - daemon: Fix leak after listing volumes CVE-2013-1962 - Don't try to add non-existant devices to ACL rhbz958837 - Avoid spamming logs with cgroups warnings rhbz958837 - audit: Properly encode device path in...

bind security and bug fix update

32:9.8.2-0.17.rc1.0.2.el64.4 - bump release and build for ULN...

boost security update

1.41.0-15 - Add in explicit dependences between some boost subpackages 1.41.0-14 - Build with -fno-strict-aliasing 1.41.0-13 - In Boost.Pool, be careful not to overflow allocated chunk size boost-1.41.0-pool.patch 1.41.0-12 - Add an upstream patch that fixes computation of CRC in zlib streams. -...

kvm security update

kvm-83-262.0.1.el59.1 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83-262.el51 - kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch bz910839 - kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch bz910839 - Resolves:...

git security update

1.7.1-3.1 - fix CVE-2013-0308 1.7.1-3 - fix CVE-2010-3906...

axis security update

0:1.2.1-7.3 - Add missing connection hostname check against X.509 certificate name - Resolves: CVE-2012-5784...

vino security update

2.28.1-8 - Remove spurious 'e' from glib2-devel requirement 2.28.1-7 - Bump version number 2.28.1-6 - Bump version number 2.28.1-5 - Add reachability.patch Remove UI about whether the is only reachable locally or not. Fix for CVE-2011-1164 - Bug 553477 2.28.1-5 - Add upnp.patch Fix for...

hplip3 security and bug fix update

3.9.8-15 - Another D-Bus fix, part of bug 501834. 3.9.8-14 - Create debugging files securely CVE-2011-2722, bug 725830. 3.9.8-13 - Several parallel-install fixes bug 501834. 3.9.8-12 - Applied patch to fix CVE-2010-4267, remote stack overflow vulnerability bug 662740...

ruby security and bug fix update

1.8.5-27 - unintentional file creation caused by inserting an illegal NUL character ruby-1.8.6-CVE-2012-4522-io.c-pipeopen-command-name-should-not-contain-null-.patch - Related: rhbz867750 1.8.5-26 - escaping vulnerability about Exceptiontos / NameErrortos ruby-1.8.7-p371-CVE-2012-4481.patch -...

postgresql and postgresql84 security update

8.4.13-1 - Update to PostgreSQL 8.4.13, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-13.html including the fixes for CVE-2012-3488, CVE-2012-3489 Resolves: 852020...

dhcp security update

12:4.1.1-31.P1.0.1.el63.1 - Added oracle-errwarn-message.patch 12:4.1.1-31.P1.1 - An error in the handling of malformed client identifiers can cause a denial-of-service condition in affected servers. CVE-2012-3571, 843120 - Memory Leaks Found In ISC DHCP CVE-2012-3954, 843120...

icedtea-web security update

1.2.1-1 - Updated to 1.2.1 - Resolves: CVE-2012-3422 - Resolves: CVE-2012-3423...

ImageMagick security and bug fix update

6.2.8.0-15.el5 - Fix for PostScript conversion was incomplete, as larger documents would end up being cropped without the -g option 797364 6.2.8.0-14.el5 - Add fix for CVE-2012-0247 CVE-2012-0248 CVE-2012-1185 CVE-2012-1186 - Add fix for CVE-2012-0259 CVE-2012-0260 CVE-2012-1798 6.2.8.0-13.el5 -...

conga security, bug fix, and enhancement update

0.12.2-51.0.1.el5 - Added conga-enterprise.patch - Added conga-enterprise-Carthage.patch to support OEL5 - Replaced redhat logo image in conga-0.12.2.tar.gz 0.12.2-51 - Fix bz711494 CVE-2011-1948 plone: reflected XSS vulnerability - Fix bz771920 CVE-2011-4924 Zope: Incomplete upstream patch for...

php53 security update

5.3.3-1.6 - add security fix for CVE-2012-0830 786757...

netpbm security update

10.35.58-8.el5.3 - Actually apply the patch for - CVE-2009-4274 760849 10.35.58-8.el5.2 - fix xpmtoppm overfow - CVE-2009-4274 760849 10.35.58-8.el5.1 - fix libjasper heap buffer overflow CVE-2011-4516 CVE-2011-4517 760849...

dbus security update

1:1.2.24-5 - Merge changes from RHEL-6 branch: Drop default patch fuzz Merge CVE-2010-4352.patch from RHEL-60-Z - Apply patches for CVE-2011-2200 - Resolves: 725313...

system-config-firewall security update

system-config-firewall: 1.2.27-3.3 - fixed possible privilege escalation flaw via use of python pickle CVE-2011-2520, replaced pickle by json rhbz717985 - stop D-BUS firewall mechanism on update system-config-printer: 1.1.16-17:.2 - Build pycups with -fno-strict-aliasing compiler option to avoid...

thunderbird security update

1.5.0.12-38.0.1.el4 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove thunderbird-redhat-default-prefs.js - Replaced clean.gif in tarball 1.5.0.12-39 - Added fixes from 1.9.2.18...

xen security update

3.0.3-120.el56.2 - Fix logic and integer overflow in xctrybzip2decode rhbz 696938 - Fix logic and integer overflow in xctrylzmadecode rhbz 696938 - Fix integer and buffer overflows in xcdomprobebzimagekernel rhbz 696938...

openldap security and bug fix update

2.3.43-12.7 - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success 680484 2.3.43-12.6 - fix: slapd concurrent access to connections causes slapd to silently die 677611...

seamonkey security update

1.0.9-67.0.1.el48 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-67.el4 - Added fixes from 1.9.1.17...

bzip2 security update

1.0.5-7 - Resolves: 632268 integer overflow flaw in BZ2decompress - CVE-2010-0405 upstream patch...

bind security update

32:9.7.0-5.P2.1 - fix CVE-2010-3613 and CVE-2010-3614...

openssl security update

0.9.7a-43.17.6 - CVE-2010-4180 - disable code for SSLOPNETSCAPEREUSECIPHERCHANGEBUG 659462 - CVE-2009-3245 - fix missing checks on allocation failure in bnwexpand 570924...

seamonkey security update

1.0.9-66.0.1.el48 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-66.el4 - Added fixes from 1.9.1.16...

apr-util security update

1.3.9-3.1 - add security fix for CVE-2010-1623 659253...

thunderbird security update

1.5.0.12-31.0.1.el4 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove thunderbird-redhat-default-prefs.js Replaced clean.gif in tarball 1.5.0.12-31 - Added fixes from 1.9.1.14...

postgresql and postgresql84 security update

postgresql: 8.1.22-1.el55.1 - Update to PostgreSQL 8.1.22, for various fixes described at http://www.postgresql.org/docs/8.1/static/release.html including the fix for CVE-2010-3433 Resolves: 639931 postgresql84: 8.4.5-1.el55.1 - Update to PostgreSQL 8.4.5, for various fixes described at...

seamonkey security update

1.0.9-63.0.1.el4 - Added mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and emoved corresponding RedHat ones 1.0.9-63.el4 - Added fixes for mozbz576447, 583225 1.0.9-62.el4 - Added fixes from 1.9.1.12...

freetype security update

2.1.4-15.el3 - Add freetype-2.1.4-axis-name-overflow.patch Avoid overflow when dealing with names of axes - Resolves: 614014 2.1.4-14.el3 - Add freetype-2.1.4-CVE-2010-2527.patch Use precision for '%s' where appropriate to avoid buffer overflows - Resolves: 614014 2.1.4-13.el3 - Add...

freetype security update

2.2.1-25 - Add freetype-2.2.1-axis-name-overflow.patch Avoid overflow when dealing with names of axes - Resolves: 614012 2.2.1-24 - Modify freetype-2.2.1-CVE-2010-2519.patch additional fix If the type of the POST fragment is 0, the segment is completely ignored - Resolves: 614012 2.2.1-23 - Add...

dbus security update

1.1.2-12.el54.1 - CVE-2009-1189 dbus: invalid fix for CVE-2008-3834...

ntp security update

4.2.2p1-9.el54.1 - fix DoS with mode 7 packets 532639, CVE-2009-3563 - compile with -fno-strict-aliasing...

expat security update

1.95.8-8.3.2 - add security fix for CVE-2009-3560 531710 1.95.8-8.3.1 - add security fix for CVE-2009-3720 531710...

kdegraphics security update

3.3.1-15.2 - Add missing NULL check to CVE-2009-3608 patch 3.3.1-15.1 - CVE-2009-0791...

cups security update

1:1.1.22-0.rc1.9.32:.3 - Updated patch to fix CVE-2009-0791 to treat also cases gmallocint C + int nObjs int objSize bug 491840. 1:1.1.22-0.rc1.9.32:.2 - Applied patch to fix CVE-2009-0949 bug 500972. 1:1.1.22-0.rc1.9.32:.1 - Applied patch to fix CVE-2009-0791 bug 491840. - Applied patch to fix...

bind security update

9.3.4-6.0.3.P1 - check DSAdoverify return value correctly...

libvorbis security update

1.1.2-3.el5.2 - fix release tag Related: 444707 1.1.2-3.el5.1 - fix CVE-2008-1420, CVE-2008-1419, CVE-2008-1423 Resolves: 444707...

Important: pcre security update

6.6-2.7 - Fix the names of the patches added in 6.6-2.5: mv pcre-6.4-posix.diff pcre-6.6-CVE-2006-7225.patch mv pcre-6.4-fix1.patch pcre-6.6-CVE-2006-7226.patch - Update pcre-6.6-CVE-2007-1659.patch - Update pcre-6.6-CVE-2007-1660.patch - Add pcre-6.6-CVE-2006-7230.patch - Resolves: 380531...

Important: xpdf security update

2.02-11.el3 - Resolves: 356791, CVE-2007-4033 CVE-2007-4352 CVE-2007-5392 CVE-2007-5393 xpdf various flaws 2.02-10.RHEL3 - Resolves: bz248198, CVE-2007-3387 xpdf integer overflow...

Important: gpdf security update

2.8.2-7.7.1 - Bump release. 2.8.2-7.4.3 - Fix a couple of typos in the patch for 356641. 2.8.2-7.4.2 - Add patch to fix CVE-2007-4352, CVE-2007-5392, and CVE-2007-5393 356641. 2.8.2-7.4.1 - Add patch to fix CVE-2007-3387 248203. - Add patch to fix CVE-2006-0301 179053...

Critical: pcre security update

6.6-2.1 - Resolves: 315951, CVE-2007-1659, CVE-2007-1660 6.6-1.2 - Resolves: 315951, CVE-2007-1659, CVE-2007-1660...

Important: openssl security update

0.9.8b-8.3.2 - more DTLS fixes 321211 0.9.8b-8.3.1 - fix CVE-2007-3108 - side channel attack on private keys 322891 - fix CVE-2007-5135 - off-by-one in SSLgetsharedciphers 309871 - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow 321211...

Moderate: kdelibs security update

3.5.4-13.el5.0.1 - Remove Version branding - Maximum rpm trademark logos removed pics/crystalsvg/-mime-rpm 3.5.4-13.el5 - Resolves: 293571 CVE-2007-0537 Konqueror improper HTML comment rendering CVE-2007-1564 FTP protocol PASV design flaw affects konqueror 3.5.4-12.el5 - resolves: 293421,...

Important xorg-x11 security update

6.8.2-1.EL.13.37.2.1 - Add oracle detection to Imake and xprint 6.8.2-1.EL.13.37.2 - Fix for CID font parser integer overflows. CVE-2006-3470, 204548 - Remove withalternateprojectroot macros...