xorg-x11-server security update

1.13.0-11.1.2 - CVE-2013-4396: Fix use-after free in ImageText requests 1014561...

dhcp security and bug fix update

12:4.1.1-34.P1.0.1.el6 - Added oracle-errwarn-message.patch 12:4.1.1-34.P1 - Reducing the expiration time for an IPv6 lease may cause the server to crash CVE-2012-3955, 858130 12:4.1.1-33.P1 - Use getifaddrs for interface discovery code on Linux 803540 - dhclient-script: do not backup&restore...

libvirt security and bug fix update

libvirt-0.9.10-21.0.1.el63.5 - Replace docs/et.png in tarball with blank image libvirt-0.9.10-21.el63.5 - security: Fix libvirtd crash possibility CVE-2012-4423 - Fix augeas test of shared sanlock leases rhbz858988 - qemu augeas: Add spicetls/spicetlsx509certdir rhbz858988 - Fix mistakes in augea...

postgresql and postgresql84 security update

8.4.13-1 - Update to PostgreSQL 8.4.13, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-13.html including the fixes for CVE-2012-3488, CVE-2012-3489 Resolves: 852020...

kvm security update

83-249.0.1.el58.5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch 83-249.el58.5 - kvm-console-bounds-check-whenever-changing-the-cursor-du-58.patch bz851255 - CVE: CVE-2012-3515 - Resolves: bz851255 EMBARGOED CVE-2012-3515 qemu/kvm: VT100...

libreoffice security update

3.4.5.2-16.1.0.1.el63 - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' 3.4.5.2-16.1 - Resolves: rhbz839867 CVE-2012-2665...

krb5 security update

1.9-33.2 - pull up the patch to correct a possible NULL pointer dereference in kadmind CVE-2012-1013, 827517 1.9-33.1 - add candidate patch from upstream to fix freeing uninitialized pointer in the KDC MITKRB5-SA-2012-001, CVE-2012-1015, 839859...

glibc security and bug fix update

2.12-1.80.el63.3 - Fix incorrect/corrupt patchfile for 833716. Did not affect generated code, but tests were missing 833716. 2.12-1.80.el63.2 - Fix regression after patch for BZ804630 837026. 2.12-1.80.el63.1 - Fixes an unbound alloca and related problems. 833716...

bind security update

32:9.7.3-8.P3.3 - fix CVE-2012-1667 and CVE-2012-1033...

freetype security update

2.3.11-6.el62.9 - Fix CVE-2012-1126, 1127, 1130, 1131, 1132, 1134, 1136, 1137, 1139, 1140, 1141, 1142, 1143, 1144 - Properly initialize array 'result' in FTOutlineGetOrientation - Check bytes per row for overflow in bdfparseglyphs - Resolves: 806268...

samba3x security update

3.5.10-0.108 - Security Release, fixes CVE-2012-1182 - resolves: 804650...

boost security and bug fix update

1.33.1-15 - Fix bugs in parsing invalid regexps - Resolves: 766755 1.33.1-14 - Delete leftover .orig files after patches are successfully applied 1.33.1-13 - GCC 4.4 fixes - Resolves: 567722 1.33.1-11 - Add a fix for thread safety bug in boost::regex - Build with -fno-strict-aliasing due to the...

texlive security update

2007-57 - fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552 CVE-2011-1553 CVE-2011-1554, texlive various flaws 773183...

krb5-appl security update

1.0.1-7 - Correct patch, bump release 1.0.1-6 - Fix for CVE-2011-4862...

samba3x security update

3.5.4-0.83.2 - Security Release, add fix for CVE-2011-2724 - related: 722555 3.5.4-0.83.1 - Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678 - resolves: 722555...

krb5-appl security update

1.0.1-2.1 - ftpd: add candidate patch to detect setegid/setregid/setresgid and check for errors when calling them MITKRB5-SA-2011-005, CVE-2011-1526, 713341...

eclipse security, bug fix, and enhancement update

eclipse: 1:3.6.1-6.13 - Drop patch to remove ant-trax needed by test runs. 1:3.6.1-6.12 - Add two upstream patches to allow for running SDK JUnit tests. 1:3.6.1-6.11 - Bring in line with Fedora. - Remove some stuff that is now done in eclipse-build. - Fix sources URL. - Add PDE dependency on zip...

openldap security and bug fix update

2.3.43-12.7 - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success 680484 2.3.43-12.6 - fix: slapd concurrent access to connections causes slapd to silently die 677611...

openssl security update

0.9.7a-43.17.6 - CVE-2010-4180 - disable code for SSLOPNETSCAPEREUSECIPHERCHANGEBUG 659462 - CVE-2009-3245 - fix missing checks on allocation failure in bnwexpand 570924...

cups security update

1.3.7-18:.8 - Applied patch to fix cupsd memory corruption vulnerability CVE-2010-2941, STR 3648, bug 624438. - Fix latent privilege escalation vulnerability CVE-2010-2431, STR 3510, bug 605397...

glibc security update

2.5-49.el55.6 - Never expand in privileged programs 643818, CVE-2010-3847...

quagga security update

0.98.6-5.el55.2 - Resolves: 638627 - CVE-2007-4826 CVE-2010-2948 quagga: various flaws...

ImageMagick security and bug fix update

6.2.8.0-4.el55.2 - Fix SGI image decoding 625058 6.2.8.0-4.el55.1 - Add fix for CVE-2009-1882 504304...

thunderbird security update

1.5.0.12-28.0.1.el4 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove thunderbird-redhat-default-prefs.js - Replaced clean.gif in tarball 1.5.0.12-28 - Added fixes from 1.9.1.11 1.5.0.12-26 - Added patches from 1.9.1.10...

avahi security update

0.6.16-9.el5 - Related: 609318 - Fixes CVE-2010-2244 0.6.16-8.el5 - Related: 609318 - Fixes CVE-2010-2244...

perl-Archive-Tar security update

1.39.1-1.el5.1 - cleaning spec and nvr - Related: rhbz595733 1.40-1.el5.1 - update to real version 1.3901, but for rpm updates, it will be 1.40 - Resolves: rhbz595733 1.40-1 - update to 1.40 - Resolves: rhbz595733...

cpio security update

2.5-6 - CVE-2010-0624 fix heap-based buffer overflow by expanding a specially-crafted archive 2.5-5.RHEL3 - fix buffer overflow on 64-bit systems 229191...

kvm security and bug fix update

kvm-83-105.0.1.el54.27 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.27 - kvm-kernel-KVM-VMX-Check-cpl-before-emulating-debug-register-ac.patch bz563516 - Resolves: bz563516 KVM: Check cpl before emulating debug register access rhel-5.4.z kvm-83-105.el54.26 -...

kdegraphics security update

3.3.1-17.1 - Resolves: 543494, CVE-2009-4035, buffer overflow in FoFiType1::parse...

kdegraphics security update

3.3.1-15.2 - Add missing NULL check to CVE-2009-3608 patch 3.3.1-15.1 - CVE-2009-0791...

kernel security update

2.4.21-60.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-60.EL - Fix null...

python security update

2.2.3-6.11 - Fix all of the low priority security bugs: - Resolves: rhbz486114 - Multiple integer overflows in python core CVE-2008-2315 - Resolves: 455008 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Resolves: 443810 - Multiple integer overflows discovered ...

cups security update

1:1.1.22-0.rc1.9.32:.3 - Updated patch to fix CVE-2009-0791 to treat also cases gmallocint C + int nObjs int objSize bug 491840. 1:1.1.22-0.rc1.9.32:.2 - Applied patch to fix CVE-2009-0949 bug 500972. 1:1.1.22-0.rc1.9.32:.1 - Applied patch to fix CVE-2009-0791 bug 491840. - Applied patch to fix...

ntp security update

4.2.2p1-9.el53.2 - fix buffer overflow when parsing Autokey association message 500783, CVE-2009-1252 - fix buffer overflow in ntpq 500783, CVE-2009-0159...

seamonkey security update

1.0.9-15.el4.0.1 - Add mozilla-oracle-default-bookmarks.html, mozilla-oracle-default-prefs.js, and mozilla-home-page.patch with Oracle default URLs 1.0.9-15.el4 - Fix SMTP regression 1.0.9-14.el4 - Don't deny for native wrappers in an XBL Binding 1.0.9-13.el4 - Fix assertions in script 1.0.9-12.e...

Moderate: httpd security update

2.0.52-38.ent.2.0.1 - use oracle index page oracleindex.html - updated string and distro in specfile 2.0.52-38.ent.2 - add security fix for CVE-2007-6388 427236 - add security fix for modproxyftp UTF-7 XSS 427743 2.0.52-38.ent.1 - add security fixes for CVE-2007-4465, CVE-2007-5000 421611...

Important: kernel security and bug fix update

2.6.9-67.0.1.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach Brown orabug 5760648 2.6.9-67.0.1 -kernel ieee80211 off-by-two integer underflow...

pam security, bug fix, and enhancement update

0.77-66.23 - pamcracklib should count the last char when computing difference 267201 0.77-66.22 - add pamtally2 module 228044 - unset XAUTHORITY when appropriate 228980 - CVE-2007-1716 always decrement use count 230823 - reset priority only when specified in limits.conf 232407 - CVE-2007-3102...

Important: poppler security update

2.3.27-8.1 Fixes for: - 345101 - CVE-2007-4352 xpdf memory corruption in DCTStream::readProgressiveDataUnit - 345111 - CVE-2007-5392 xpdf buffer overflow in DCTStream::reset - 345121 - CVE-2007-5393 xpdf buffer overflow in CCITTFaxStream::lookChar...

Important: nfs-utils-lib security update

1.0.8-7.2.z2 - Updated libnfsidmap to -17 to fix a security issue bz 254041 1.0.8-7.2.z1 - Fixed RPC library buffer overflow bz 265061...

Critical: seamonkey security update

1.0.9-4.el4.0.1 - Add mozilla-oracle-default-bookmarks.html, mozilla-oracle-default-prefs.js, and mozilla-home-page.patch for errata build 1.0.9-4.el4 - Remove broken patch for Mozilla bug 199088 1.0.9-3.el4 - Update to latest snapshot of Mozilla 1.8.0 branch - Include patches for Mozilla bugs...

libtiff security update

3.5.7-25.el3.4 - Fix several vulnerabilities CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465...

Important: kernel security update

2.6.9-42.0.10.0.1 -Fix bonding primary=ethX so it picks correct network Bert Barbe IT 101532 ORA 5136660 2.6.9-42.0.10 -fix key serial number collision problem David Howells 227495 CVE-2007-0006 -fix audit panic on watched files Eric Paris 223129 CVE-2007-0001 2.6.9-42.0.9 -fix icmp oops in sctp...

Critical firefox security update

1.5.0.8-0.1.1.el4 - Replace default-bookmarks.html and default-prefs.js 1.5.0.8-0.1.el4 - Update to 1.5.0.8 RC 1.5.0.7-0.1.el4 - Update to 1.5.0.7 1.5.0.5-0.el4.1 - Update to 1.5.0.5...

kdegraphics security update

7:3.3.1-3.9 - apply xpdf-splash-overflow-CVE-2006-0301-fix.diff to fix CVE-2006-0301 184307 7:3.3.1-3.8 - apply xpdf-splash-overflow-CVE-2006-0301-fix.diff to fix CVE-2006-0301 179055 7:3.3.1-3.7 - apply patch to fix buffer overflow issue in the xpdf codebase when handling splash images...

ruby:4.0 security update

ruby 4.0.3-33 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. CVE-2026-42245 Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. CVE-2026-42246 Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments...

Unbreakable Enterprise kernel security update: Fragnesia

5.15.0-320.202.8.5 - net: skbuff: propagate shared-frag marker through frag-transfer helpers Hyunwoo Kim Orabug: 39420565 CVE-2026-46300 - net: skbuff: preserve shared-frag marker during coalescing William Bowling Orabug: 39420565...

kernel security update

6.12.0-124.55.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

kernel security update

6.12.0-124.31.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

ovirt-engine security update

4.4.10.7-1.0.33 - Fix external providers properties observability 4.4.10.7-1.0.32 - Upgrade bundled frontend dependency of jquery-ui 4.4.10.7-1.0.31 - Allow enrolling certificates in non-responsive state and Extend the lifetime of non-web certificates 4.4.10.7-1.0.30 - Fix network exception...