dbus security update

1:1.2.24-4 - Apply patch for CVE-2010-4352 - Resolves: 684852...

seamonkey security update

1.0.9-68.0.1.el48 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-68.el4 - Added fixes for mozbz642395 - ignore bogus Comodo certificates...

thunderbird security and bug fix update

3.1.9-3.0.1.el60 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 3.1.9-3 - Added fixes for mozbz642395 - ignore bogus Comodo certificates 3.1.9-2 - Update to 3.1.9...

wireshark security update

1.2.15-1.0.1.el60.1 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.2.15-1 - upgrade to 1.2.15 - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.14.html - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html - Resolves: CVE-2011-0444 CVE-2011-053...

wireshark security update

1.0.15-1.0.1.el56.4 - Added oracle-ocfs2-network.patch 1.0.15-1.4 - fix few security issues - Resolves: CVE -2011-0024 CVE-2011-0538 CVE-2011-1139 CVE-2011-1140 CVE-2011-1141 CVE-2011-1143 612240 1.0.15-1.3 - recompile with -fno-strict-aliasing 1.0.15-1.2 - fix buffer overflow in ENTTEC dissector...

Oracle Linux 6 Unbreakable Enterprise kernel security fix update

2.6.32-100.28.9.el6 - sync up the version 2.6.32-100.28.8.el6 - block check for proper length of iov entries earlier in blkrqmapuseriov Xiaotian Feng CVE-2010-4668 - scm: lower SCMMAXFD Eric Dumazet CVE-2010-4249 - perfevents: Fix perfcountermmap hook in mprotect Pekka Enberg CVE-2010-4169 - tcp:...

krb5 security update

1.8.2-3.6 - add revised upstream patch to fix double-free in KDC while returning typed-data with errors CVE-2011-0284, 681564 1.8.2-3.5 - add upstream patches to fix double-free in KDC while returning typed-data with errors CVE-2011-0284, 681564...

openldap security update

2.4.19-15.2 - fix: security - DoS when submitting special MODRDN request 680975 2.4.19-15.1 - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success - fix: CVE-2011-1025 rootpw is not verified for ndb backend...

openldap security and bug fix update

2.3.43-12.7 - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success 680484 2.3.43-12.6 - fix: slapd concurrent access to connections causes slapd to silently die 677611...

qemu-kvm security update

qemu-kvm-0.12.1.2-2.113.el60.8 - kvm-Revert-blockdev-Fix-drivedel-not-to-crash-when-driv.patch bz677170 - kvm-Revert-blockdev-check-dinfo-ptr-before-using-v2.patch bz677170 - kvm-Revert-Implement-drivedel-to-decouple-block-removal.patch bz677170 -...

vsftpd security update

2.2.2-6.el60.1 - Resolves: 681891 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern...

tomcat5 security update

0:5.5.23-0jpp.17 - Resolves: rhbz 674599 JDK Double.parseDouble DoS...

tomcat6 security and bug fix update

0:6.0.24-24 - Resolves: rhbz674601 - Removed wildcard in main %files that caused duplicate ownership - of log4j.properties 0:6.0.24-23 - Resolves: rhbz674601 - Reverse - tomcat user requires login shell - Reverse - rhbz 611244 tomcat-juli missing symlink - PM/QE decision to include only the...

scsi-target-utils security update

1.0.4-3.1 - fix the buffer overflow bug before iscsi login CVE-2011-0001...

subversion security update

1.6.11-2.3 - add security fix for CVE-2011-0715 681173...

kernel security update

2.6.32-71.18.2.el6 - fs sunrpc: Correct a misapplied patch J. Bruce Fields 678094 678146...

subversion security and bug fix update

1.6.11-7.3 - add fix for svnadmin hotcopy 681522 1.6.11-7.2 - add security fix for CVE-2011-0715 681171...

logwatch security update

7.3.6-49 - Added fix for CVE-2011-1018: Privilege escalation due improper sanitization of special characters in log file names Resolves: 680304...

libtiff security update

3.9.4-1.el60.1 - Add fix for CVE-2011-0192 Resolves: 679298...

libcgroup security update

0.36-6.1 - Fixed buffer overflow when parsing cgexec command line parameters. - Added checking of source of netlink messages to cgrulesengd daemon. - Resolves: CVE-2011-1006 CVE-2011-1022...

kernel security and bug fix update

2.6.18-238.5.1.0.1.el5 - scsi fix scsi hotplug and rescan race orabug 10260172 - fix filpclose race Joe Jin orabug 10335998 - fix missing aiocomplete in endio Joel Becker orabug 10365195 - make xenkbd.abspointer=1 by default orabug 67188919 - xen check to see if hypervisor supports memory...

thunderbird security update

1.5.0.12-35.0.1.el4 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove thunderbird-redhat-default-prefs.js Replaced clean.gif in tarball 1.5.0.12-35 - Added fixes from 1.9.1.17...

samba3x security update

3.5.4-0.70.1 - Security Release, fixes CVE-2011-0719 - resolves: 678332...

mailman security update

3:2.1.9-6.1 - fix 677845 - fixed CVE-2008-0564, CVE-2010-3089 and CVE-2011-0707...

seamonkey security update

1.0.9-67.0.1.el48 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-67.el4 - Added fixes from 1.9.1.17...

firefox security and bug fix update

firefox: 3.6.14-4.0.1.el60 - Added firefox-oracle-default-prefs.js and removed firefox-redhat-default-prefs.js 3.6.14-4 - Update to build3 3.6.14-3 - Update to build2 3.6.14-2 - Update to 3.6.14 xulrunner: 1.9.2.14-3.0.1.el60 - Added xulrunner-oracle-default-prefs.js and removed the corresponding...

thunderbird security update

3.1.8-4.0.2.el60 - Replace clean.gif in tarball 3.1.8-4.0.1.el60 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 3.1.8-4 - Update to build3 3.1.8-3 - Update to build2 3.1.8-2 - Update to 3.1.8...

samba security update

3.5.4-68.2 - Security Release, fixes CVE-2011-0719 - resolves: 678334...

mailman security update

3:2.1.12-14.2 - fix 677848 - fixed build problem without brew 3:2.1.12-14.1 - fix 677848 - fixed CVE-2010-3089 and CVE-2011-0707...

pango security update

1.28.1-3.el60.5 - Prevent an integer overflow in hbbufferensure Related: 679693 1.28.1-3.el60.4 - Check for realloc failures in hbbufferensure CVE-2011-0064...

sendmail security and bug fix update

8.13.1-6 - rpm attributes S,5,T not recorded for statistics file - fix specfile for passing rpm -V test 8.13.1-5 - recompile with -fno-strict-aliasing - fix typo, purge-mqueue script - remove README.certcnnul 8.13.1-4 - fix CVE-2009-4565 554987 - fix MAXHOSTNAMELEN 485380 - fix stale files in...

bash security and bug fix update

3.0-27 - Dont include backup files Resolves: 657500 3.0-26 - Fixed bash-3.0-tmpfile.patch Resolves: 657500 3.0-25 - Dont include backup files Resolves: 657500 3.0-24 - Use mktemp for temporary files Resolves: 657500 3.0-23 - bash globbing sometimes ignores locale settings Resolves: 539538 - check...

kernel security, bug fix, and enhancement update

2.6.32-71.18.1.el6 - netdrv ixgbe: make sure FCoE DDP user buffers are really released by the HW Frantisek Hrbata 674002 617193 - netdrv ixgbe: invalidate FCoE DDP context when no error status is available Frantisek Hrbata 674002 617193 - netdrv ixgbe: avoid doing FCoE DDP when adapter is DOWN or...

python security and bug fix update

2.3.4-14.9 - rgbimg module integer overflows CVE-2010-1450 Resolves: rhbz650936 2.3.4-14.8 - Backport fix for socket.htons on s390x from 2.4 patch 37 - Resolves: rhbz513341 - Backport fixes for grp.getgrgid patch 38 and for pwd.getpwuid patch 39 - Resolves: rhbz497540 - Backport fixes to strptime...

Oracle Linux 4.9 kernel security and bug fix update

2.6.9-100 -cxgb3: prevent reading uninitialized stack memory to fix xgbextensionioctl infoleak Eugene Teo 633153 CVE-2010-3296 -mlx4: disable MSI-X by default Andy Gospodarek 530596 -ext3: call fs invalidatepage instead of blockinvalidatepage Josef Bacik 488611 -av7110: check for negative array...

java-1.6.0-openjdk security update

1.6.0.0-1.39.b17 - respin of IcedTea6 1.7.10 - Resolves: rhbz676276 1.6.0.0-1.37.b17 - Updated to IcedTea6 1.7.10 - Resolves: rhbz676276...

subversion security update

1.6.11-7.1 - add security fixes for CVE-2010-4644, CVE-2010-4539 672676...

subversion security update

1.6.11-2.2 - add security fixes for CVE-2010-4644, CVE-2010-4539 672678 1.6.11-2.1 - add security fix for CVE-2010-3315 640322...

dhcp security update

12:4.1.1-12.P1.2 - CVE-2011-0413: Unexpected abort caused by a DHCPv6 decline message 672994...

kernel security and bug fix update

2.6.32-71.14.1.0.1.el6 - replace Red Hat with Oracle in files genkey and kernel.spec 2.6.32-71.14.1.el6 - kvm x86: zero kvmvcpuevents-interrupt.pad Marcelo Tosatti 665471 665409 CVE-2010-4525 2.6.32-71.13.1.el6 email6.RHSA-2011-0007 178L, 11970C written - scsi lpfc: Fixed crashes for NULL pnode...

nss security update

nss: 3.12.8-1.0.1.el6 - Update expired PayPalEE.cert to fix build failure - Use blank image instead of clean.gif in nss-3.12.8-stripped.tar.bz2 3.12.8-1 - Update to 3.12.8 nss-softokn: 3.12.8-1 - Update to 3.12.8 nss-util: 3.12.7-1 - Update to 3.12.7...

java-1.6.0-openjdk security update

1.6.0.0-1.36.b17 - removed plugin. How it comes in?! - Resolves: rhbz676295 1.6.0.0-1.33.b17 - bumped release number, it was accidentaly reduced, and now lower version then last one was released. - Resolves: rhbz676295 1.6.0.0-1.22.b17 - Updated to 1.7.9 tarball - removed patch6, fixed upstrream ...

quagga security update

0.99.15-5el60.1 - Resolves: 644830 - CVE-2010-2948 CVE-2010-2949 quagga various flaws...

openoffice.org security and bug fix update

3.2.1-19.3.0.1.el60.5 - Replaced RedHat colors with Oracle colors, OOOVENDOR with Oracle Corp., and the filename redhat.soc with oracle.soc in specfile bug10911 1:3.2.1-19.6.5 - Related: rhbz671087 set right file permissions 1:3.2.1-19.6.4 - Resolves: rhbz671087 file locks are not created with...

samba security update

3.5.4-68.1 - Security Release, fixes CVE-2010-3069 - resolves: 632264...

mysql security update

5.1.52-1.1 - Update to MySQL 5.1.52, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html including numerous small security issues Resolves: 652553 - Sync with current Fedora package; this includes: - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded...

libvpx security update

0.9.0-8 - Fix CVE-2010-4203 Resolves: rhbz652440 0.9.0-7 - Import 0.9.0-6 package from Fedora - Add patch porting yasm syntax to gas Related: rhbz603113...

pidgin security update

2.6.6-6.el6 - Add patch for CVE-2010-3711 RH bug 645413...

dhcp security update

12:4.1.1-12.P1.1 - CVE-2010-3611: NULL pointer dereference crash via crafted DHCPv6 packet 651913...

thunderbird security update

3.1.7-3.0.1.el6 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 3.1.7-3 - Update to 3.1.7 build3 3.1.7-2 - Update to 3.1.7 build2 3.1.7-1 - Update to 3.1.7 3.1.6-1 - Update to 3.1.6 3.1.5-1 - Update to 3.1.5...