java-1.7.0-openjdk security update

1.7.0.9-2.3.3.0.1.el63.1 - Update DISTRONAME in specfile 1.7.0.9-2.3.3.el6.1 - Changed permissions of sa-jdi.jar to correct 644 - Resolves: rhbz865050 1.7.0.9-2.3.3.el6 - Updated to 2.3.3 - Updated java-1.7.0-openjdk-java-access-bridge-security.patch - Resolves rhbzs 856124, 865346, 865348, 86535...

java-1.6.0-openjdk security update

1:1.6.0.0-1.50.1.11.5 - Changed permissions of sa-jdi.jar to correct 644 - Resolves: rhbz865045 1:1.6.0.0-1.49.1.11.5 - Updated to IcedTea6 1.11.5 - Resolves rhbzs 856124, 865346, 865348, 865350, 865352, 865354, 865357, 865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514, 86551...

kernel security and bug fix update

2.6.32-279.11.1.el6 - net core: Fix napigrofrags vs netpoll path Amerigo Wang 857854 845347 - netdrv benet: disable BH in callers of beprocessmcc Amerigo Wang 857854 845347 - net bonding: remove IFFINNETPOLL flag Amerigo Wang 857854 845347 - mm fix contigpagedata kABI breakage and related memory...

xulrunner security update

10.0.8-2.0.1.el63 - Replace xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js 10.0.8-2 - Added patches from 10.0.9 ESR...

thunderbird security update

10.0.8-2.0.1.el63 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 10.0.8-2 - Added patches from 10.0.9 ESR...

bind security update

32:9.8.2-0.10.rc1.5 - fix CVE-2012-5166...

bind97 security update

32:9.7.0-10.P2.4 - fix CVE-2012-5166...

libvirt security and bug fix update

libvirt-0.9.10-21.0.1.el63.5 - Replace docs/et.png in tarball with blank image libvirt-0.9.10-21.el63.5 - security: Fix libvirtd crash possibility CVE-2012-4423 - Fix augeas test of shared sanlock leases rhbz858988 - qemu augeas: Add spicetls/spicetlsx509certdir rhbz858988 - Fix mistakes in augea...

thunderbird security update

10.0.8-1.0.1.el63 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 10.0.8-1 - Update to 10.0.8 ESR...

firefox security and bug fix update

firefox 10.0.8-1.0.2.el63 - Updated firefox-oracle-default-prefs.js based on latest firefox-redhat-default-prefs.js 10.0.8-1.0.1.el63 - Replace firefox-redhat-default-prefs.js with firefox-oracle-default-prefs.js 10.0.8-1 - Update to 10.0.8 ESR xulrunner 10.0.8-1.0.1.el63 - Replace...

kernel security and bug fix update

kernel 2.6.18-308.16.1.el5 - Revert: fs nfsd4: Remove check for a 32-bit cookie in nfsd4readdir Eric Sandeen 847943 784191 - Revert: fs add new FMODE flags: FMODE32bithash and FMODE64bithash Eric Sandeen 847943 784191 - Revert: fs nfsd: rename int access to int mayflags in nfsdopen Eric Sandeen...

1

kernel 2.6.18-308.16.1.0.1.el5 - kernel Initialize the local uninitialized variable stats. orabug 14051367 - fs JBD:make jbd support 512B blocks correctly for ocfs2. orabug 13477763 - x86 fix fpu context corrupt when preempt in signal context orabug 14038272 - net bonding: fix carrier detect when...

freeradius security update

2.1.12-4 - resolves: bug855316 CVE-2012-3547 freeradius: Stack-based buffer overflow by processing certain expiration date fields of a certificate during x509 certificate validation...

freeradius2 security update

2.1.12-4 - resolves: bug855315 CVE-2012-3547 freeradius: Stack-based buffer overflow by processing certain expiration date fields of a certificate during x509 certificate validation...

Unbreakable Enterprise kernel Security update

2.6.39-200.32.1 - dl2k: Clean up rioioctl Stephan Mueller Orabug: 14680245 CVE-2012-2313 - hugetlb: fix resvmap leak in error path Christoph Lameter Orabug: 14680284 CVE-2012-2390 - rds: set correct msgnamelen Jay Fenlason Orabug: 14680018 CVE-2012-3430...

Unbreakable Enterprise kernel security update

2.6.32-300.32.3 - dl2k: Clean up rioioctl Stephan Mueller Orabug: 14675306 CVE-2012-2313 - hugetlb: fix resvmap leak in error path Christoph Lameter Orabug: 14676403 CVE-2012-2390 - rds: set correct msgnamelen Jay Fenlason Orabug: 14676504 CVE-2012-3430...

kernel security and bug fix update

2.6.32-279.9.1.el6 - md raid1, raid10: avoid deadlock during resync/recovery. Dave Wysochanski 845464 835613 - fs dlm: fix deadlock between dlmsend and dlmcontrold David Teigland 849051 824964 - ata libata: Add space to fix 2GB ATA Flash Disk/ADMA428M blacklist Prarit Bhargava 851445 843849 - fs...

qpid security, bug fix, and enhancement update

python-qpid 0.14-11 - BZs: 825078 - Resolves: rhbz840053 qpid-cpp 0.14-22.0.1.el63 - Update summary and description in specfile to be product neutral 0.14-22 - BZs: 609685, 849654, 854004 0.14-21 - BZs: 831365, 840982, 844618 0.14-20 - BZs: 683711, 689408, 825078, 834608, 841196, 841488 0.14-19 -...

libxml2 security update

2.7.6-8.0.1.el63.3 - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball 2.7.6-8.el63.3 - Change the XPath code to percolate allocation error CVE-2011-1944 2.7.6-8.el63.2 - Fix an off by one pointer access CVE-2011-3102 2.7.6-8.el63.1 - Fix a failure...

openjpeg security update

1.3-9 - Apply patch for CVE-2012-3535 Resolves: CVE-2012-3535...

spice-gtk security update

0.11-11.el63.1 - Fix version for Z-stream Related: rhbz854823 0.11-12 - Add patch fixing CVE-2012-3524 Resolves: rhbz854823...

bind security update

32:9.8.2-0.10.rc1.3 - fix CVE-2012-4244...

bind97 security update

32:9.7.0-10.P2.3 - fix CVE-2012-4244...

bind security and bug fix update

30:9.3.6-20.P1.4 - bind-chroot-admin: set correct permissions on /etc/named.conf during update 30:9.3.6-20.P1.3 - fix CVE-2012-4244...

postgresql security update

8.1.23-6 - Back-port upstream fix for CVE-2012-3488 Resolves: 852015...

postgresql and postgresql84 security update

8.4.13-1 - Update to PostgreSQL 8.4.13, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-13.html including the fixes for CVE-2012-3488, CVE-2012-3489 Resolves: 852020...

libxslt security update

1.1.26-2.0.2.el63.1 - Increment release to avoid ULN conflict with previous release. 1.1.26-2.0.1.el63.1 - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball 1.1.26-2.el63.1 - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870 - Fix direct patter...

dbus security update

1:1.2.24-7.0.1.el63 - fix netlink poll: error 4 Zhenzhong Duan 1:1.2.24-7 - Resolves: 854821 1:1.2.24-6 - Apply patches for CVE-2011-2200 - Resolves: 725314...

quagga security update

0.99.15-7.2 - improve fix for CVE-2011-3325 0.99.15-7.1 - fix CVE-2011-3323 - fix CVE-2011-3324 - fix CVE-2011-3325 - fix CVE-2011-3326 - fix CVE-2011-3327 - fix CVE-2012-0255 - fix CVE-2012-0249 and CVE-2012-0250 - fix CVE-2012-1820 0.99.15-7 - Resolves: 684751 - CVE-2010-1674 CVE-2010-1675 quag...

quagga security update

0.98.6-7.1 - fix CVE-2011-3323 - fix CVE-2011-3324 - fix CVE-2011-3325 - fix CVE-2011-3326 - fix CVE-2011-3327 - fix CVE-2012-0249 - fix CVE-2010-1674 0.98.6-7 - Resolves: 638628 - CVE-2007-4826 CVE-2010-2948 quagga: various flaws 0.98.6-6 - Resolves: 528583 - Missing declarations cause zebra to...

ghostscript security update

8.70-14:.1 - Added inputChan lower-bounds checking to icclib bug 854227, CVE-2012-4405...

libexif security update

0.6.21-5 - Update to version 0.6.21 fixing many bugs and CVEs - Remove upstreamed patches - Resolves: 839915...

qemu-kvm security update

0.12.1.2-2.295.el63.2 - kvm-console-bounds-check-whenever-changing-the-cursor-du.patch bz851257 - Resolves: bz851257 EMBARGOED CVE-2012-3515 qemu/kvm: VT100 emulation vulnerability rhel-6.3.z...

xen security update

3.0.3-135.el58.5 - console: Prevent escape sequence length overflow rhbz 851253...

kvm security update

83-249.0.1.el58.5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch 83-249.el58.5 - kvm-console-bounds-check-whenever-changing-the-cursor-du-58.patch bz851255 - CVE: CVE-2012-3515 - Resolves: bz851255 EMBARGOED CVE-2012-3515 qemu/kvm: VT100...

java-1.7.0-openjdk security update

1.7.0.5-2.2.1.0.1.el63.3 - Modify DISTRONAME for Oracle 1.7.0.5-2.2.1.el6.3 - Removed patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch - Applied upstream patches for same issue: patch 1001 sec-webrevs-openjdk7-29aug2012-7162473.patch patch 1002...

java-1.6.0-openjdk security update

1:1.6.0.0-1.49.1.11.4 - Updated to latest IedTea6 1.11.4 - Resolves: rhbz853345 1:1.6.0.0-1.48.1.11.3 - Access gnome bridge jar is forced to have 644 permissions - Resolves: rhbz828752 1:1.6.0.0-1.47.1.11.3 - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch: -...

java-1.6.0-openjdk security update

1.6.0.0-1.28.1.10.9.0.1.el58 - Add oracle-enterprise.patch 1:1.6.0.0-1.28.1.10.9 - Updated to latest IcedTea6 1.10.9 - Resolves: rhbz846709 - Resolves: rhbz853114 1:1.6.0.0-1.27.1.10.8 - Access gnome bridge jar is forced to have 644 permissions - Resolves: rhbz828749...

firefox security update

firefox 10.0.7-1.0.1.el63 - Replace firefox-redhat-default-prefs.js with firefox-oracle-default-prefs.js 10.0.7-1 - Update to 10.0.7 ESR xulrunner 10.0.7-1.0.1.el63 - Replace xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js 10.0.7-1 - Update to 10.0.7 ESR 10.0.6-2 - Added...

thunderbird security update

10.0.7-1.0.1.el63 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 10.0.7-1 - Update to 10.0.7 ESR...

glibc security and bug fix update

2.5-81.el58.7 - Fix out of bounds array access in strto exposed by 847929 patch. 2.5-81.el58.6 - Fix integer overflow leading to buffer overflow in strto 847929 2.5-81.el58.5 - Do not use PTIEEEIP ptrace calls 839411 - Update ULPs 839411 - Fix various transcendentals in non-default rounding modes...

glibc security update

2.12-1.80.el63.5 - Fix integer overflow leading to buffer overflow in strto and related out of bounds array index 847931...

python-paste-script security update

1.7.3-5 - fix group permissions in serve.py Resolves: CVE-2012-0878...

libvirt security and bug fix update

libvirt-0.9.10-21.0.1.el63.4 - Replace docs/et.png in tarball with blank image libvirt-0.9.10-21.el63.4 - daemon: Fix crash in virTypedParameterArrayClear rhbz844735 - remote: Fix locking in stream APIs rhbz847946 - Using virOnce for global initialization is desirable rhbz847959 - json: Fix...

tetex security update

3.0-33.15.el59.1 - more robust fix for CVE-2010-3702 773178 3.0-33.15 - apply patch for CVE-2010-3702,3704 773180 3.0-33.14 - fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552 CVE-2011-1553 CVE-2011-1554, texlive various flaws 773180...

1

kernel 2.6.18-308.13.1.0.1.el5 - kernel Initialize the local uninitialized variable stats. orabug 14051367 - fs JBD:make jbd support 512B blocks correctly for ocfs2. orabug 13477763 - x86 fix fpu context corrupt when preempt in signal context orabug 14038272 - net bonding: fix carrier detect when...

kernel security and bug fix update

kernel 2.6.18-308.13.1.el5 - net e1000e: Cleanup logic in e1000checkforserdeslink82571 Dean Nelson 841370 771366 - net e1000e: Correct link check logic for 82571 serdes Dean Nelson 841370 771366 - mm NULL pointer dereference in vmenoughmemory Jerome Marchand 840077 836244 - fs dlm: fix slow rsb...

gimp security update

2:2.2.13-2.0.7.el58.5 - fix overflow in GIF loader CVE-2012-3481 2:2.2.13-2.0.7.el58.4 - fix overflows in PSD plugin CVE-2009-3909, CVE-2012-3402 - fix heap corruption and overflow in GIF plug-in CVE-2011-2896 - fix overflow in CEL plug-in CVE-2012-3403...

gimp security update

2:2.6.9-4.3 - fix overflow in GIF loader 847303 2:2.6.9-4.2 - fix overflows in GIF, CEL loaders 727800, 839020...

kernel security and bug fix update

2.6.32-279.5.1.el6 - net 8021q/vlan: filter device events on bonds Neil Horman 842429 841983 2.6.32-279.4.1.el6 - fs proc: stats: Use archidletime for idle and iowait times if available Steve Best 841579 841149 - drm i915: fix integer overflow in i915gemexecbuffer2 Jacob Tanenbaum 824553 824555...