10033 matches found
firefox security update
52.5.1-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update Todd Vierling orabug 19847484 52.5.1-1 - Update to 52.5.1 ESR...
apr security update
1.3.9-5.1 - Resolves: 1507346 - CVE-2017-12613 apr: Out-of-bounds array deref in aprtimeexp functions...
postgresql security update
8.4.20-8 - backport fix for CVE-2017-7546 rhbz1484677...
mercurial security update
2.6.2-8 - Fix CVE-2017-1000115 and CVE-2017-1000116...
subversion security update
1.7.14-11 - add security fix for CVE-2017-9800...
qemu-kvm security update
1.5.3-141.el74.1 - kvm-qemu-nbd-Ignore-SIGPIPE.patch bz1468107 - Resolves: bz1468107 CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort rhel-7.4.z...
libtirpc security update
0.2.1-139 - Fix for CVE-2017-8779 bz 1449458...
wireshark security and bug fix update
1.8.10-25.0.1 - Fix ocfs2 dissector John Haxby orabug 21505640 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.8.10-25 - rebuilt 1.8.10-24 - Related: 1245887 - segfault with CVE-2013-4075 capture - valgrind error with CVE-2015-3812 capture 1.8.10-23 - Resolves: 12381...
ipa security update
4.4.0-14.0.1.el73.1.1 - Blank out header-logo.png product-name.png Replace login-screen-logo.png 20362818 4.4.0-14.1.1 - Resolves: 1370493 CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy - ipa-kdb: search for password policies globally - Renamed patches 1011 a...
bind97 security update
32:9.7.0-21.P2.8 - Fix CVE-2016-2848 32:9.7.0-21.P2.7 - Fix CVE-2016-2776 32:9.7.0-21.P2.6 - Fix CVE-2016-1285 and CVE-2016-1286 32:9.7.0-21.P2.5 - Fix CVE-2015-8704 32:9.7.0-21.P2.4 - Fix CVE-2015-8000 32:9.7.0-21.P2.3 - Fix CVE-2015-5722 32:9.7.0-21.P2.2 - Fix CVE-2015-5477 32:9.7.0-21.P2.1 - F...
firefox security update
45.2.0-1.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 45.2.0-1 - Update to 45.2.0 ESR 45.1.1-2 - Added fix for mozbz1270046 - new Samba auth response...
firefox security update
45.1.0-1.0.1.el72 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 45.1.0-1 - Update to 45.1.0 ESR 45.0.2-1 - Update to 45.0.2 ESR 45.0.1-1 - Update to 45.0.1 ESR 45.0-5 - Fixed crashed after start rhbz1323744, rhbz1323738...
krb5 security update
1.10.3-42z1 - Fix CVE-2015-8629 and CVE-2015-8631 - Also fix a spec trigger issue that prevents building - Resolves: 1306973...
qemu-kvm security and bug fix update
1.5.3-105.el72.3 - kvm-fwcfg-add-check-to-validate-current-entry-value-CVE.patch bz1298047 - Resolves: bz1298047 CVE-2016-1714 qemu-kvm: Qemu: nvram: OOB r/w access in processing firmware configurations rhel-7.2.z 1.5.3-105.el72.2 - kvm-raw-posix-Fix-.bdrvcogetblockstatus-for-unaligne.patch...
openldap security, bug fix, and enhancement update
2.4.40-8 - NSS does not support string ordering 1231522 - implement and correct order of parsing attributes 1231522 - add multimask and multistrength to correctly handle sets of attributes 1231522 - add new cipher suites and correct AES-GCM attributes 1245279 - correct DEFAULT ciphers handling to...
bind security update
30:9.3.6-25.P1.4 - Fix CVE-2015-5722 30:9.3.6-25.P1.3 - Fix CVE-2015-5477 30:9.3.6-25.P1.2 - Remove files backup after patching Related: 1171971 30:9.3.6-25.P1.1 - Fix CVE-2014-8500 1171971...
pam security update
1.1.1-20.1 - fix CVE-2015-3238 - DoS due to blocking pipe with very long password...
ipa security and bug fix update
3.0.0-47.el6 - Resolves: 1220788 - Some IPA schema files are not RFC 4512 compliant 3.0.0-46.el6 - Use tls version range in NSSHTTPS initialization - Resolves: 1154687 - POODLE: force using safe ciphers non-SSLv3 in IPA client and server - Resolves: 1012224 - host certificate not issued to client...
autofs security and bug fix update
5.0.5-113.0.1 - add autofs-5.0.5-lookup-mounts.patch Orabug:12658280 Bert Barbe use tcp instead of udp 5.0.5-113 - bz1201195 - autofs: MAPFMTDEFAULT is not macro in lookupprogram.c - fix macro usage in lookupprogram.c. - Resolves: rhbz1201195 5.0.5-112 - bz1124083 - Autofs stopped mounting...
firefox security update
38.1.0-1.0.1.el71 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 38.1.0-1 - Update to 38.1.0 ESR 38.0.1-2 - Fixed rhbz1222807 by removing preun section...
qemu-kvm security update
0.12.1.2-2.448.el66.3 - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch bz1219267 - Resolves: bz1219267 EMBARGOED CVE-2015-3456 qemu-kvm: qemu: floppy disk controller flaw rhel-6.6.z...
qemu-kvm security and bug fix update
0.12.1.2-2.448.el66.2 - kvm-cirrus-fix-blit-region-check.patch bz1170571 - kvm-cirrus-don-t-overflow-CirrusVGAState-cirrusbltbuf.patch bz1170571 - Resolves: bz1170571 CVE-2014-8106 qemu-kvm: qemu: cirrus: insufficient blit region checks rhel-6.6.z 0.12.1.2-2.448.el66.1 -...
pcre security and enhancement update
8.32-14 - Fix CVE-2014-8964 unused memory usage on zero-repeat assertion condition bug 1169797 8.32-13 - Disable unsupported JIT mode on little-endian 64-bit PowerPC platform bug 1125642 - Raise optimization level to 3 on little-endian 64-bit PowerPC bug 1123498...
libvirt security and bug fix update
1.1.1-29.0.1.el70.4 - Replace docs/et.png in tarball with blank image 1.1.1-29.el70.4 - qemu: blockcopy: Don't remove existing disk mirror info rhbz1149078 - qemu: copy: Accept 'format' parameter when copying to a non-existing img rhbz1149078 - qemu: reject rather than hang on blockcommit of acti...
jasper security update
1.900.1-16.2 - CVE-2014-8137 - double-free in in jasiccattrvaldestroy 1173566 - CVE-2014-8138 - heap overflow in jp2decode 1173566 1.900.1-16.1 - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC marker segment decoders 1171208 1.900.1-16 - CERT VU887409: heap buffer overflow...
rpm security update
4.11.1-18 - Add check against malicious CPIO file name size 1163060 - Fixes CVE-2014-8118 4.11.1-17 - Fix race condidition where unchecked data is exposed in the file system 1163060 - Fixes CVE-2013-6435...
libxml2 security update
2.9.1-5.0.1.el70.1 - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball 2.9.1-5.1 - CVE-2014-3660 denial of service via recursive entity expansion rhbz1149087...
nss security update
nss 3.16.2-7.0.1.el70 - Added nss-vendor.patch to change vendor 3.16.2-7 - Resolves: Bug 1145433 - CVE-2014-1568 3.16.2-6 - Rolling back to commit e5fb6e476c179665976e906604496cbbb24f22a7 - Related: Bug 1145433 nss-softokn 3.16.2-3 - Resolves: Bug 1145433 - CVE-2014-1568 nss-util 3.16.2-2 -...
qemu-kvm security and bug fix update
0.12.1.2-2.415.el65.14 - The commit for zrelease .13 was incomplete; the changes to qemu-kvm.spec did not include the '%patchNNNN -p1' lines for patches 4647 through 4655; so although the patch files themselves were committed, the srpm build did not pick them up. In addition, the commit log did n...
resteasy-base security update
2.3.5-3 - Resolves: rhbz1121917 - CVE-2014-3490: XXE via parameter entities...
thunderbird security update
24.7.0-1.0.1.el65 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 24.7.0-1 - Update to 24.7.0...
thunderbird security update
24.5.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 24.5.0-1 - Update to 24.5.0...
net-snmp security and bug fix update
1:5.5-49.0.1.el65.1 - snmptrapd: Fix crash due to access of freed memory John Haxby orabug 14404682 1:5.5-49.1 - added 'diskio' option to snmpd.conf, it's possible to monitor only selected devices in diskIOTable 990674 - fixed CVE-2014-2284: denial of service flaw in Linux implementation of...
subversion security update
1.6.11-10 - add security fixes for CVE-2013-1968, CVE-2013-2112, CVE-2014-0032...
mod_nss security update
1.0.8-19 - Resolves: CVE-2013-4566 - Bugzilla Bug 1030265 - modnss: incorrect handling of NSSVerifyClient in directory context rhel-6.5.z...
rdma stack security, bug fix, and enhancement update
ibutils 1.5.7-8 - Add the -output patch to have programs use /var/cache/ibutils instead of /tmp Resolves: bz958569 infinipath-psm Thu Jan 24 2013 Jay Fenlason - Put the udev rules file in the right place Resolves: rhbz866732 - include a patch from upstream to fix undefined references Resolves:...
xorg-x11-server security update
1.13.0-11.1.2 - CVE-2013-4396: Fix use-after free in ImageText requests 1014561...
php security update
5.3.3-23 - add security fix for CVE-2013-4113...
tomcat5 security update
0:5.5.23-0jpp.40 - Related: CVE-2013-1976 It was found during additional testing - that the tomcat5 init may fail to start because the user - shell is set to sbin/nologin. Fixed in init scrip. SU now - uses -s /bin/sh during startup 0:5.5.23-0jpp.39 - Resolves: CVE-2013-1976 Improper TOMCATLOG...
389-ds-base security and bug fix update
1.2.11.15-14 - Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so ticket 627 - Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion ticket 623 1.2.11.15-13 - Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon...
boost security update
1.41.0-15 - Add in explicit dependences between some boost subpackages 1.41.0-14 - Build with -fno-strict-aliasing 1.41.0-13 - In Boost.Pool, be careful not to overflow allocated chunk size boost-1.41.0-pool.patch 1.41.0-12 - Add an upstream patch that fixes computation of CRC in zlib streams. -...
gnutls security update
2.8.5-10.1 - fix CVE-2013-1619 - fix TLS-CBC timing attack 908238...
vino security update
2.28.1-8 - Remove spurious 'e' from glib2-devel requirement 2.28.1-7 - Bump version number 2.28.1-6 - Bump version number 2.28.1-5 - Add reachability.patch Remove UI about whether the is only reachable locally or not. Fix for CVE-2011-1164 - Bug 553477 2.28.1-5 - Add upnp.patch Fix for...
Unbreakable Enterprise kernel Security update
2.6.39-200.34.1 - net/sfc limit number of segments per skb on tx Maxim Uvarov Orabug: 14769994 CVE-2012-3412...
freeradius security update
2.1.12-4 - resolves: bug855316 CVE-2012-3547 freeradius: Stack-based buffer overflow by processing certain expiration date fields of a certificate during x509 certificate validation...
quagga security update
0.98.6-7.1 - fix CVE-2011-3323 - fix CVE-2011-3324 - fix CVE-2011-3325 - fix CVE-2011-3326 - fix CVE-2011-3327 - fix CVE-2012-0249 - fix CVE-2010-1674 0.98.6-7 - Resolves: 638628 - CVE-2007-4826 CVE-2010-2948 quagga: various flaws 0.98.6-6 - Resolves: 528583 - Missing declarations cause zebra to...
kvm security update
83-249.0.1.el58.5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch 83-249.el58.5 - kvm-console-bounds-check-whenever-changing-the-cursor-du-58.patch bz851255 - CVE: CVE-2012-3515 - Resolves: bz851255 EMBARGOED CVE-2012-3515 qemu/kvm: VT100...
icedtea-web security update
1.2.1-1 - Updated to 1.2.1 - Resolves: CVE-2012-3422 - Resolves: CVE-2012-3423...
glibc security and bug fix update
2.5-81.el58.4 - Fix iconv segfault if the invalid multibyte character 0xffff is input when converting from IBM930 837896 2.5-81.el58.3 - Fix unbound alloca in vfprintf 833720...