krb5 security update

1.8.2-3.7 - kadmind: add upstream patch to fix free on an invalid pointer 696341, MITKRB5-SA-2011-004, CVE-2011-0285...

kernel security and bug fix update

2.6.18-238.9.1.0.1.el5 - scsi fix scsi hotplug and rescan race orabug 10260172 - fix filpclose race Joe Jin orabug 10335998 - fix missing aiocomplete in endio Joel Becker orabug 10365195 - make xenkbd.abspointer=1 by default orabug 67188919 - xen check to see if hypervisor supports memory...

xorg-x11-server-utils security update

7.4-15.el60.1 - cve-2011-0465: Sanitize cpp macro expansion. CVE 2011-0465...

avahi security update

0.6.16-10 - Fix for CVE-2011-1002 - Resolves: 684884...

xorg-x11 security update

6.8.2-1.0.1.EL.67 - Add Enterprise Linux detection Add XFree86-4.3.0-oracle-bug-report-address-update.patch 6.8.2-1.EL.67 - cve-2011-0465.patch: Sanitize cpp macro expansion. CVE 2011-0465...

dhcp security update

12:4.1.1-12.P1.4 - Better fix for CVE-2011-0997: making domain-name check more lenient 690578 12:4.1.1-12.P1.3 - dhclient: insufficient sanitization of certain DHCP response values CVE-2011-0997, 690578...

spice-xpi security update

2.4-1.el60.2 - Fix security vulnerability CVE-2011-0012 rhbz639869 Resolves: rhbz639870 2.4-1.el60.1 - Fix security vulnerability CVE-2011-1179 rhbz689931 Resolves: rhbz689932...

kernel security and bug fix update

2.6.32-71.24.1.el6 - fs Revert 'fs inotify: stop kernel memory leak on file creation failure' Eric Paris 656831 656832 CVE-2010-4250 2.6.32-71.23.1.el6 - x86 Revert 'x86 mtrr: Assume SYSCFGTom2ForceMemTypeWB exists on all future AMD CPUs' Frank Arnold 683813 652208 2.6.32-71.22.1.el6 - rebuild...

postfix security update

2:2.6.6-2.1 - fix CVE-2011-0411 682978...

postfix security update

2:2.3.3-2.2 - fix CVE-2011-0411 683387 - fix CVE-2008-2937 683387 - defuzzification of patches...

glibc security update

2.12-1.7.el60.5 - Avoid too much stack use in fnmatch 681054, CVE-2011-1071 - Properly quote output of locale 625893, CVE-2011-1095 - Don't leave empty element in rpath when skipping the first element, ignore rpath elements containing non-isolated use of when privileged 667974, CVE-2011-0536...

policycoreutils security update

policycoreutils: 2.0.83-19.8 - Fix seunshare to work with /tmp content when SELinux context is not provided Resolves: 679689 2.0.83-19.7 - put back correct chcon - Latest fixes for seunshare 2.0.83-19.6 - Fix rsync command to work if the directory is old. - Fix all tests Resolves: 679689...

glibc security update

2.5-58.el56.2 - Avoid too much stack use in fnmatch 681054, CVE-2011-1071 - Properly quote output of locale 625893, CVE-2011-1095 - Don't leave empty element in rpath when skipping the first element, ignore rpath elements containing non-isolated use of when privileged 667974, CVE-2011-0536 - Fix...

logrotate security update

3.7.8-12.1 - fix 688518 - fixed CVE-2011-1154, CVE-2011-1155 and CVE-2011-1098...

quagga security update

0.99.15-5el60.2 - Resolves: 684750 - CVE-2010-1674 CVE-2010-1675 quagga various flaws...

libtiff security and bug fix update

3.9.4-1.el60.2 - Fix incorrect fix for CVE-2011-0192 Resolves: 688829 - Add fix for CVE-2011-1167 Resolves: 688742...

gdm security update

2.30.4-21.0.2.el60.1 - Added oracle-enterprise.patch to show oracle-release contents. 2.30.4-21.1 - Fix CVE-2011-0727...

rsync security update

3.0.6-5.1 - Add upstream patch to fix CVE-2011-1097 - Incremental file-list corruption due to temporary fileextracnt increments Resolves: 684932...

libvirt security update

0.8.1-27.0.1.el60.5 - Replace docs/et.png in tarball with blank image 0.8.1-27.el60.5 - Properly report error in virConnectDomainXMLToNative CVE-2011-1146 0.8.1-27.el60.4 - Add missing checks for read-only connections CVE-2011-1146 0.8.1-27.el60.3 - Remove patches not suitable for proper Z-stream...

conga security update

0.12.2-24.0.1.el56.1 - Added conga-enterprise.patch - Added conga-enterprise-Carthage.patch to support OEL5 - Recreated Data.fs in lucidb.tar.gz - Replaced redhat logo image in conga-0.12.2.tar.gz 0.12.2-24.1 - Fix bz680515 CVE-2011-0720 plone: unauthorized remote administrative access...

seamonkey security update

1.0.9-68.0.1.el48 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-68.el4 - Added fixes for mozbz642395 - ignore bogus Comodo certificates...

dbus security update

1:1.2.24-4 - Apply patch for CVE-2010-4352 - Resolves: 684852...

firefox security update

1.9.2.15-2.0.1.el60 - Replace xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js 1.9.2.15-2 - Fixed mozbz642395...

thunderbird security and bug fix update

3.1.9-3.0.1.el60 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 3.1.9-3 - Added fixes for mozbz642395 - ignore bogus Comodo certificates 3.1.9-2 - Update to 3.1.9...

wireshark security update

1.0.15-1.0.1.el56.4 - Added oracle-ocfs2-network.patch 1.0.15-1.4 - fix few security issues - Resolves: CVE -2011-0024 CVE-2011-0538 CVE-2011-1139 CVE-2011-1140 CVE-2011-1141 CVE-2011-1143 612240 1.0.15-1.3 - recompile with -fno-strict-aliasing 1.0.15-1.2 - fix buffer overflow in ENTTEC dissector...

wireshark security update

1.2.15-1.0.1.el60.1 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.2.15-1 - upgrade to 1.2.15 - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.14.html - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html - Resolves: CVE-2011-0444 CVE-2011-053...

Oracle Linux 6 Unbreakable Enterprise kernel security fix update

2.6.32-100.28.9.el6 - sync up the version 2.6.32-100.28.8.el6 - block check for proper length of iov entries earlier in blkrqmapuseriov Xiaotian Feng CVE-2010-4668 - scm: lower SCMMAXFD Eric Dumazet CVE-2010-4249 - perfevents: Fix perfcountermmap hook in mprotect Pekka Enberg CVE-2010-4169 - tcp:...

krb5 security update

1.8.2-3.6 - add revised upstream patch to fix double-free in KDC while returning typed-data with errors CVE-2011-0284, 681564 1.8.2-3.5 - add upstream patches to fix double-free in KDC while returning typed-data with errors CVE-2011-0284, 681564...

qemu-kvm security update

qemu-kvm-0.12.1.2-2.113.el60.8 - kvm-Revert-blockdev-Fix-drivedel-not-to-crash-when-driv.patch bz677170 - kvm-Revert-blockdev-check-dinfo-ptr-before-using-v2.patch bz677170 - kvm-Revert-Implement-drivedel-to-decouple-block-removal.patch bz677170 -...

openldap security update

2.4.19-15.2 - fix: security - DoS when submitting special MODRDN request 680975 2.4.19-15.1 - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success - fix: CVE-2011-1025 rootpw is not verified for ndb backend...

openldap security and bug fix update

2.3.43-12.7 - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success 680484 2.3.43-12.6 - fix: slapd concurrent access to connections causes slapd to silently die 677611...

vsftpd security update

2.2.2-6.el60.1 - Resolves: 681891 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern...

tomcat6 security and bug fix update

0:6.0.24-24 - Resolves: rhbz674601 - Removed wildcard in main %files that caused duplicate ownership - of log4j.properties 0:6.0.24-23 - Resolves: rhbz674601 - Reverse - tomcat user requires login shell - Reverse - rhbz 611244 tomcat-juli missing symlink - PM/QE decision to include only the...

scsi-target-utils security update

1.0.4-3.1 - fix the buffer overflow bug before iscsi login CVE-2011-0001...

tomcat5 security update

0:5.5.23-0jpp.17 - Resolves: rhbz 674599 JDK Double.parseDouble DoS...

subversion security and bug fix update

1.6.11-7.3 - add fix for svnadmin hotcopy 681522 1.6.11-7.2 - add security fix for CVE-2011-0715 681171...

kernel security update

2.6.32-71.18.2.el6 - fs sunrpc: Correct a misapplied patch J. Bruce Fields 678094 678146...

subversion security update

1.6.11-2.3 - add security fix for CVE-2011-0715 681173...

logwatch security update

7.3.6-49 - Added fix for CVE-2011-1018: Privilege escalation due improper sanitization of special characters in log file names Resolves: 680304...

libcgroup security update

0.36-6.1 - Fixed buffer overflow when parsing cgexec command line parameters. - Added checking of source of netlink messages to cgrulesengd daemon. - Resolves: CVE-2011-1006 CVE-2011-1022...

libtiff security update

3.9.4-1.el60.1 - Add fix for CVE-2011-0192 Resolves: 679298...

samba3x security update

3.5.4-0.70.1 - Security Release, fixes CVE-2011-0719 - resolves: 678332...

thunderbird security update

1.5.0.12-35.0.1.el4 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove thunderbird-redhat-default-prefs.js Replaced clean.gif in tarball 1.5.0.12-35 - Added fixes from 1.9.1.17...

thunderbird security update

3.1.8-4.0.2.el60 - Replace clean.gif in tarball 3.1.8-4.0.1.el60 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 3.1.8-4 - Update to build3 3.1.8-3 - Update to build2 3.1.8-2 - Update to 3.1.8...

seamonkey security update

1.0.9-67.0.1.el48 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-67.el4 - Added fixes from 1.9.1.17...

mailman security update

3:2.1.9-6.1 - fix 677845 - fixed CVE-2008-0564, CVE-2010-3089 and CVE-2011-0707...

kernel security and bug fix update

2.6.18-238.5.1.0.1.el5 - scsi fix scsi hotplug and rescan race orabug 10260172 - fix filpclose race Joe Jin orabug 10335998 - fix missing aiocomplete in endio Joel Becker orabug 10365195 - make xenkbd.abspointer=1 by default orabug 67188919 - xen check to see if hypervisor supports memory...

firefox security and bug fix update

firefox: 3.6.14-4.0.1.el60 - Added firefox-oracle-default-prefs.js and removed firefox-redhat-default-prefs.js 3.6.14-4 - Update to build3 3.6.14-3 - Update to build2 3.6.14-2 - Update to 3.6.14 xulrunner: 1.9.2.14-3.0.1.el60 - Added xulrunner-oracle-default-prefs.js and removed the corresponding...

mailman security update

3:2.1.12-14.2 - fix 677848 - fixed build problem without brew 3:2.1.12-14.1 - fix 677848 - fixed CVE-2010-3089 and CVE-2011-0707...

samba security update

3.5.4-68.2 - Security Release, fixes CVE-2011-0719 - resolves: 678334...