xen security and bug fix update

3.0.3-132.el57.2 - Release device backends before restarting guest on the destination machine rhbz 743850 - Fix SCSI buffer overflow and disable SCSI CD-ROMs rhbz 736289 3.0.3-132.el57.1 - hotplug: set netback/tap MTU to the same value as the bridge MTU rhbz 738608 - copy the MTU of the physical...

kernel security, bug fix, and enhancement update

kernel: 2.6.18-274.7.1.0.1.el5 - fix ia64 build error due to add-support-above-32-vcpus.patchZhenzhong Duan - x86 use dynamic vcpuinfo remap to support more than 32 vcpus Zhenzhong Duan - scsi add additional scsi medium error handling John Sobecki orabug 12904887 - x86 Fix lvt0 reset when hvm boo...

httpd security and bug fix update

2.2.3-53.0.2.el57.3 - Fix modssl always performing full renegotiation orabug 12423387 - replace index.html with Oracle's index page oracleindex.html - update vstring and distro in specfile 2.2.3-53.3 - add security fix for CVE-2011-3368 743903 - fix regressions in byterange handling 736593...

httpd security and bug fix update

2.2.15-9.0.1.el61.3 - replace index.html with Oracle's index page - update vstring in specfile 2.2.15-9.3 - add security fixes for CVE-2011-3347, CVE-2011-3368 743901 - fix regressions in CVE-2011-3192 patch 736592...

kdelibs and kdelibs3 security update

3.5.10-24.1 - Resolves: bz746160, CVE-2011-3365, input validation failure in KSSL...

krb5 security update

1.9-9.2 - apply upstream patch to fix a null pointer derference with the LDAP kdb backend CVE-2011-1527, an assertion failure with multiple kdb backends CVE-2011-1528, and a null pointer dereference with multiple kdb backends CVE-2011-1529 740084...

java-1.6.0-openjdk security update

1:1.6.0.0-1.40.1.9.10 - Resolves: rhbz744788 - Bumped to IcedTea6 1.9.8 -removed font copying Security fixes - S7000600, CVE-2011-3547: InputStream skip information leak - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow ...

postgresql security update

8.4.9-1 - Update to PostgreSQL 8.4.9, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-9.html http://www.postgresql.org/docs/8.4/static/release-8-4-8.html including the fix for CVE-2011-2483 Resolves: 740735...

postgresql84 security update

8.4.9-1.el57.1 - Update to PostgreSQL 8.4.9, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-9.html http://www.postgresql.org/docs/8.4/static/release-8-4-8.html including the fix for CVE-2011-2483 Resolves: 740739...

pidgin security update

2.6.6-7 - Add patch for CVE-2011-3594 RH bug 743798. 2.6.6-6 - Add patch for CVE-2011-1091 RH bug 743798...

kdelibs security and enhancement update

6:4.3.4-11.4 - Resolves: bz743951, use ca-certificates' ca-bundle.crt 6:4.3.4-11.3 - Resolves: bz743515, CVE-2011-3365 - input validation failure...

Unbreakable Enterprise kernel security update

2.6.32-200.20.1.el6uek - afpacket: prevent information leak CVE-2011-2898 - gro: Only reset frag0 when skb can be pulled CVE-2011-2723 - vm: fix vmpgoff wrap in stack expansion CVE-2011-2496 - vm: fix vmpgoff wrap in upward expansion CVE-2011-2496 - taskstats: don't allow duplicate entries in...

xorg-x11-server security update

1.7.7-29.2 - cve-2011-4818.patch: Multiple input sanitization flaws in GLX and Render...

xorg-x11 security update

6.8.2-1.0.1.EL.70 - Add Enterprise Linux detection - Add XFree86-4.3.0-oracle-bug-report-address-update.patch 6.8.2-1.EL.70 - cve-2011-4818.patch: Multiple input sanitization issues in GLX and Render...

openswan security update

2.6.32-4.2 Resolves: 742069 CVE-2011-3380...

kernel security, bug fix, and enhancement update

2.6.32-131.17.1.el6 - Revert: net ipv6: make fragment identifications less predictable Jiri Pirko 723432 723433 CVE-2011-2699 2.6.32-131.16.1.el6 - net brmulticast: Ensure to initialize BRINPUTSKBCBskb-mroutersonly. Frantisek Hrbata 739477 738110 2.6.32-131.15.1.el6 - rebuild 2.6.32-131.14.1.el6 ...

rpm security update

4.8.0-16.1 - fix CVE-2011-3378 742154...

seamonkey security update

1.0.9-76.0.1.el4 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-76.el4 - Added fixes from 1.9.2.23...

thunderbird security update

1.5.0.12-44.0.1.el4 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove thunderbird-redhat-default-prefs.js - Replaced clean.gif in tarball 1.5.0.12-44 - Added fixes from 1.9.2.23...

firefox security update

firefox: 3.6.23-2.0.1.el61 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 3.6.23-2 - Update to 3.6.23 xulrunner: 1.9.2.23-1.0.1.el61.1 - Replace xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js 1.9.2.23-1.1 - Rebuild. 1.9.2.23-1 - Update to...

thunderbird security update

3.1.15-1.0.1.el61 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 3.1.15-1 - Update to 3.1.15...

NetworkManager security update

0.8.1-9el61.3 - ifcfg-rh: CVE-2011-3364: filter newline characters when writing into ifcfg- files rh 737338 0.8.1-9el61.2 - ifcfg-rh: CVE-2011-3364: filter newline characters when writing into ifcfg- files rh 737338...

qt4 security update

4.2.1-1.1 - Resolves: 737815, qt/harfbuzz buffer overflow, CVE-2011-3193 - Resolves: 234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242...

evolution28-pango security update

1.14.9-13.el411 - Add patch for CVE-2011-3193 qt/harfbuzz buffer overflow...

frysk security update

0.0.1.2007.08.03-7.el4 - CVE-2011-3193 for embedded pango/harfbuzz...

qt security update

1:4.6.2-17.1 - Resolves: rhbz737812 fix multiple flaws in Qt CVE-2011-3193, CVE-2011-3194...

pango security update

1.14.9.8.0.1.el57.3 - Bump release 1.14.9.8.el51.3 - Prevent buffer overflow errors in harfbuzz module CVE-2011-3193 - Resolves: 737819...

cyrus-imapd security update

2.3.16-6.3 - Resolves: 735391 - CVE-2011-3208 nntpd buffer overflow...

squid security update

7:3.1.10-1.el61.1 - Resolves: 735447 - CVE-2011-3205 squid: buffer overflow flaw in Squid's Gopher reply parser...

librsvg2 security update

2.26.0-5.el61.1 - Store node type separately in RsvgNode CVE-2011-3146 Resolves: 735266...

nss and nspr security update

3.12.9-12.0.1.el61 - Use blank image instead of clean.gif in nss-3.12.9-stripped.tar.bz2 3.12.9-12 - Retagging 3.12.10-12 - Update builtins certs to those from NSSCKBI187RTM 3.12.9-11 - Update builtins certs to those from NSSCKBI186RTM 3.12.9-10 - Update builtins certs to NSSCKBI185RTM...

seamonkey security update

1.0.9-75.0.1.el4 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-75.el4 - Added fix for mozbz683449...

thunderbird security update

3.1.14-1.0.2.el61 - Replace clean.gif in tarball 3.1.14-1.0.1.el61 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 3.1.14-1 - Update to 3.1.14...

gstreamer-plugins security update

0.8.5-1.0.1.EL.4 - Update release to address ULN up2date 0.8.5-1.EL.4 - Add patches for CVE-2011-2911, CVE-2011-2912, CVE-2011-2913, CVE-2011-2914 and CVE-2011-2915 Related: rhbz 730997...

kernel security and bug fix update

2.6.18-274.3.1.0.1.el5 - fs nfs: Fix putnfsopencontext NULL pointer panic Joe Jin orabug 12687646 - scsi fix scsi hotplug and rescan race orabug 10260172 - fix filpclose race Joe Jin orabug 10335998 - fix missing aiocomplete in endio Joel Becker orabug 10365195 - make xenkbd.abspointer=1 by defau...

firefox security update

firefox: 3.6.22-1.0.1.el61 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 3.6.22-1 - Update to 3.6.22 xulrunner: 1.9.2.22-1.0.1.el61 - Replace xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js - 1.9.2.22-1 - Update to 1.9.2.22...

ca-certificates security update

2010.63-3.5 - BR java-openjdk 2010.63-3.4 - fix inclusion of code-signing-only certs in .trust.crt - Initial build 448497...

rsyslog security update

4.6.2-3.el61.2 - add patch to resolve buffer overflow CVE-2011-3200 Resolves: 733647...

thunderbird security update

3.1.12-2.0.1.el61 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 3.1.12-2 - Distrust a specific Certificate Authority...

firefox security update

1.9.2.20-3.0.1.el61 - Replace xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js 1.9.2.20-3 - Distrust a specific Certificate Authority...

ecryptfs-utils security update

82-6.3 - do not forget to set the group id in mount.ecryptfsprivate 82-6.2 - fix regression in ecryptfs-setup-private 82-6.1 - security fixes: - privilege escalation via mountpoint race conditions CVE-2011-1831, CVE-2011-1832 - race condition when checking source during mount CVE-2011-1833 - mtab...

seamonkey security update

1.0.9-74.0.1.el4 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-74.el4 - Updated fix for mozbz682927 1.0.9-73.el4 - Added fix for mozbz682927...

httpd security update

2.2.15-9.0.1.el61.2 - replace index.html with Oracle's index page - update vstring in specfile 2.2.15-9.2, - updated patch for CVE-2011-3192 from upstream 733062 2.2.15-9.1 - fix 733062 - backported CVE-2011-3192 fix from httpd trunk...

samba security update

3.0.33-3.29.el5.4 - Security Release, Add fix also for CVE-2011-2724 - related: 722552 3.0.33-3.29.el5.3 - Security Release, fixes CVE-2010-0547, CVE-2010-0787, CVE-2011-2694, CVE-2011-2522, CVE-2011-1678 - resolves: 722552...

samba3x security update

3.5.4-0.83.2 - Security Release, add fix for CVE-2011-2724 - related: 722555 3.5.4-0.83.1 - Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678 - resolves: 722555...

samba and cifs-utils security and bug fix update

cifs-utils: 4.8.1-2.2 - fix handling of checknewline return code in mount.cifs bz 725508 4.8.1-2.1 - mount.cifs: handle ENOSPC/EFBIG condition when altering mtab bz 725508 samba: 3.5.6-86.4 - Fix cleartext authentication after applying Windows security patch KB2536276 - resolves: 728517 3.5.6-86....

Unbreakable Enterprise kernel security and bug fix update

2.6.32-200.19.1.el6uek - Apply new fix for CVE-2011-1576. 2.6.32-200.18.1.el6uek - Revert 'proc: fix a race in doioaccounting' 2.6.32-200.17.1.el6uek - net: Fix memory leak/corruption on VLAN GRODROP CVE-2011-1576 - iommu-api: Extension to check for interrupt remapping CVE-2011-1898 - KVM: IOMMU:...

kernel security, bug fix, and enhancement update

2.6.32-131.12.1.el6 - netdrv be2net: clear intr bit in beprobe Ivan Vecera 726308 722596 2.6.32-131.11.1.el6 - mm hold the page lock until after setpagestablenode Andrea Arcangeli 726095 683658 - netdrv be2net: remove certain cmd failure logging Ivan Vecera 725329 719304 - net nl80211: missing...

system-config-printer security update

0.7.32.10-1.0.1.el57.1 - Add oracle-bug-reporting.patch 0.7.32.10-1:.1 - Applied patch to fix CVE-2011-2899 bug 728348...

libvirt security and bug fix update

0.8.7-18.0.1.el61.1 - Replace docs/et.png in tarball with blank image libvirt-0.8.7-18.el61.1 - debug: Avoid null dereference on uuid lookup api rhbz728546 - Fix auditing of disk hotunplug operations rhbz728516 - storage: Fix regression with backing format rhbz726617 - Fix performance problem of...