HelixPlayer security update

1.0.6-1.0.1.el48.1 - Identify enterprise-release 1.0.6-1.1 - Multiple security fixes: http://service.real.com/realplayer/security/01192010player/en/...

kvm security and bug fix update

kvm-83-105.0.1.el54.22 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.22 - kvm-CVE-2010-0297-usb-linux.c-fix-buffer-overflow.patch bz560769 - Resolves: bz560769 CVE-2010-0297 kvm-userspace-rhel5: usb-linux.c: fix buffer overflow rhel-5.4.z kvm-83-105.el54.21 -...

kernel security and bug fix update

2.6.9-89.0.20.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

openssl security update

0.9.8e-12.1 - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables 510197 - fix CVE-2009-4355 - do not leak memory when CRYPTOcleanupallexdata is called prematurely by application 546707...

gzip security update

1.3.5-11.0.1.el54.1 - Updated description in specfile to be product neutral 1.3.5-11:.1 - Added fix for CVE-2010-0001: 64 bit Integer underflow by decompressing LZW format files Resolves: rhbz555088...

kernel security and bug fix update

2.6.18-164.11.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug...

bind security update

30:9.3.6-4.P1.2 - NSEC validation code could cause wrong NXDOMAIN responses 554851, CVE-2010-0097 - improve fix for CVE-2009-4022 538744 - C,DNAMEs could be returned to clients without proper DNSSEC validation - don't validate + cache out-of-bailiwick data returned with a secure answer. Refetch i...

pidgin security update

2.6.5-1.el4.1 - 2.6.5 - CVE-2010-0013 - Other bug fixes - build with old gcc 2.6.4-4 - temporarily disable evolution integration in F13 until it is fixed 2.6.4-2 - disable SILC in EL6 builds 2.6.4-1 - 2.6.4...

gcc and gcc4 security update

4.1.2-46.el54.2 - fix libjava to avoid opening .la/dlopening .so files from current working directory or subdirectories thereof 545672, CVE-2009-3736...

php security update

5.1.6-24.5 - add security fix for CVE-2009-4142 543469 5.1.6-24.4 - build fix pdomysql on biarch systems 543469 5.1.6-24.3 - add security fixes for CVE-2009-2687, CVE-2009-3291, CVE-2009-3292, CVE-2009-3546 CVE-2009-4017 541597 - add build fix for mysqli on some biarch systems 543469...

krb5 security update

1.6.1-36.el54.1 - add candidate patch to correct KDC integer overflows which could be triggered by malformed RC4 and AES ciphertexts CVE-2009-4212, 546347...

kernel security update

2.6.18-164.10.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug...

kernel security update

2.6.9-89.0.19.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

dbus security update

1.1.2-12.el54.1 - CVE-2009-1189 dbus: invalid fix for CVE-2008-3834...

gd security update

2.0.33-9.4.el54.2 - rpmdiff fixes - Resolves: 541632 2.0.33-9.4.el54.1 - security fixes - CVE-2009-3546 gd: insufficient input validation in gdGetColors...

PyXML security update

0.8.4-4.2 - Use system expat library Resolves: 531852 0.8.4-4.1 - Fix buffer over read Resolves: 531852...

firefox security update

firefox: 3.0.16-1.0.1.el54 - Update firstrun and homepage URLs in specfile - Added patch oracle-firefox-branding.patch - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed the corresponding Red Hat ones 3.0.16-1 - Update to 3.0.16 xulrunner: 1.9.0.16-2.0.1.el5...

gpdf security update

2.8.2-7.7.2.el48.6 - Add patch for CVE-2009-4035 - Resolves: 543491...

xpdf security update

3.00-23.1 - Resolves: 543489, CVE-2009-4035, buffer overflow in FoFiType1::parse...

kdegraphics security update

3.3.1-17.1 - Resolves: 543494, CVE-2009-4035, buffer overflow in FoFiType1::parse...

kernel security and bug fix update

2.6.18-164.9.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug 69930...

kernel security and bug fix update

2.6.9-89.0.18.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

seamonkey security update

1.0.9-51.0.1.el48 - Added mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and removed corresponding RedHat ones 1.0.9-51.el4 - Added fixes from 1.9.0.16...

kvm security and bug fix update

kvm-83-105.0.1.el54.13 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.13 - kvm-kernel-KVM-x86-emulator-limit-instructions-to-15-bytes.patch bz541164 - Resolves: bz541164 CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes rhel-5.4.z kvm-83-105.el54.12 -...

libtool security update

1.5.22-7 - add fix for CVE-2009-3736, libltdl may load and execute code from a library in the current directory...

ntp security update

4.1.2-6.el3 - fix DoS with mode 7 packets 532641, CVE-2009-3563 - fix buffer overflow in ntpq 532641, CVE-2009-0159...

ntp security update

4.2.2p1-9.el54.1 - fix DoS with mode 7 packets 532639, CVE-2009-3563 - compile with -fno-strict-aliasing...

expat security update

1.95.8-8.3.2 - add security fix for CVE-2009-3560 531710 1.95.8-8.3.1 - add security fix for CVE-2009-3720 531710...

acpid security update

1.0.4-9.el54.1 - Resolves: 515062 CVE-2009-4033 acpid: log file created with random permissions...

xerces-j2 security update

0:2.7.1-7jpp.2.2 - Specifies target=1.3 for compilation Resolves: rhbz526017 0:2.7.1-7jpp.2.1 - Add patch for CVE-2009-2625 Resolves: rhbz526017...

dstat security update

0.6.6-3.1 - removed . and ./plugins from module loading path 538469...

bind security update

30:9.3.6-4.P1.1 - don't cache unvalidated additional sections 538744...

kdelibs security update

3.5.4-25.0.1.el54.1 - Remove Version branding - Maximum rpm trademark logos removed pics/crystalsvg/-mime-rpm in tarball 3.5.4-25.1 - bump release 3.5.4-22.2 - Resolves: 539716, CVE-2009-0689, kdelibs remote array overrun...

cups security update

1:1.3.7-11:.4 - Applied patch to fix CVE-2009-3553 bug 530111, STR 3200. - Applied patch to fix CVE-2009-2820 bug 529833, STR 3367, STR 3401...

java-1.6.0-openjdk security update

1:1.6.0.0.0-1.7.b09.0.1.el5 - Add oracle-enterprise.patch 1:1.6.0-1.7.b09 - Fixed applying patches 1:1.6.0-1.6.b09 - Updated Release 1:1.6.0-1.5.b09 - Fixed Makefile patch 1:1.6.0-1.4.b09 - Updated release tag 1:1.6.0-1.3.b09 - Updated release...

httpd security update

2.0.52-41.ent.6.0.1 - use oracle index page oracleindex.html - update vstring and distro in specfile 2.0.52-41.ent.6 - add security fixes for CVE-2009-3555, CVE-2009-1891, CVE-2009-3094, and CVE-2009-3095 534039...

httpd security update

2.2.3-31.0.1.el54.2 - replace index.html with Oracle's index page oracleindex.html - update vstring and distro in specfile 2.2.3-31.2 - add security fixes for CVE-2009-3094, CVE-2009-3095, CVE-2009-3555 534041...

4Suite security update

1.0-3.el48.1 - Fix an expat DoS CVE-2009-3720 Resolves: 532114...

libvorbis security update

1:1.1.2-3.el5.4 - fix CVE-CVE-2009-3379 Resolves: 532418...

kernel security and bug fix update

2.4.21-63.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-63.EL - fs: fix pipe nul...

kernel security update

2.6.9-89.0.16.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

kernel security and bug fix update

2.6.18-164.6.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug 69930...

wget security update

1.11.4-3 - add fix for CVE-2009-3490, incorrect verification of SSL certificate with NUL in name...

pidgin security update

2.6.3-2 - Upstream backport: 3abad7606f4a2dfd1903df796f33924b12509a56 msnservconndisconnect-crash 2.6.3-1 - 2.6.3 CVE-2009-3615...

pidgin security update

1.5.1-6 - CVE-2009-3615 - CVE-2009-3083 - CVE-2009-2703...

firefox security update

firefox: 3.0.15-3.0.1.el54 - Update firstrun and homepage URLs in specfile - Added patch oracle-firefox-branding.patch - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed the corresponding Red Hat ones 3.0.15-3 - Rebuild due to Mozilla's respin 3.0.15-2 -...

seamonkey security update

1.0.9-50.0.1.el48 - Added mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and removed corresponding RedHat ones 1.0.9-50.el4 - Added fixes from 1.9.0.15...

samba security update

3.0.33-3.15.el5 - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906 - resolves: 526660...

samba security and bug fix update

3.0.9-1.3E.16 - Security Release, fixes CVE-2009-2906 - resolves: 526657 3.0.9-X - Fix user facing cosmetic bug in patch for CVE-2007-2447 - resolves: 242754...

kernel security and bug fix update

2.6.9-89.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...