postfix security update

2:2.6.6-2.1 - fix CVE-2011-0411 682978...

glibc security update

2.12-1.7.el60.5 - Avoid too much stack use in fnmatch 681054, CVE-2011-1071 - Properly quote output of locale 625893, CVE-2011-1095 - Don't leave empty element in rpath when skipping the first element, ignore rpath elements containing non-isolated use of when privileged 667974, CVE-2011-0536...

policycoreutils security update

policycoreutils: 2.0.83-19.8 - Fix seunshare to work with /tmp content when SELinux context is not provided Resolves: 679689 2.0.83-19.7 - put back correct chcon - Latest fixes for seunshare 2.0.83-19.6 - Fix rsync command to work if the directory is old. - Fix all tests Resolves: 679689...

glibc security update

2.5-58.el56.2 - Avoid too much stack use in fnmatch 681054, CVE-2011-1071 - Properly quote output of locale 625893, CVE-2011-1095 - Don't leave empty element in rpath when skipping the first element, ignore rpath elements containing non-isolated use of when privileged 667974, CVE-2011-0536 - Fix...

quagga security update

0.99.15-5el60.2 - Resolves: 684750 - CVE-2010-1674 CVE-2010-1675 quagga various flaws...

logrotate security update

3.7.8-12.1 - fix 688518 - fixed CVE-2011-1154, CVE-2011-1155 and CVE-2011-1098...

gdm security update

2.30.4-21.0.2.el60.1 - Added oracle-enterprise.patch to show oracle-release contents. 2.30.4-21.1 - Fix CVE-2011-0727...

libtiff security and bug fix update

3.9.4-1.el60.2 - Fix incorrect fix for CVE-2011-0192 Resolves: 688829 - Add fix for CVE-2011-1167 Resolves: 688742...

rsync security update

3.0.6-5.1 - Add upstream patch to fix CVE-2011-1097 - Incremental file-list corruption due to temporary fileextracnt increments Resolves: 684932...

conga security update

0.12.2-24.0.1.el56.1 - Added conga-enterprise.patch - Added conga-enterprise-Carthage.patch to support OEL5 - Recreated Data.fs in lucidb.tar.gz - Replaced redhat logo image in conga-0.12.2.tar.gz 0.12.2-24.1 - Fix bz680515 CVE-2011-0720 plone: unauthorized remote administrative access...

libvirt security update

0.8.1-27.0.1.el60.5 - Replace docs/et.png in tarball with blank image 0.8.1-27.el60.5 - Properly report error in virConnectDomainXMLToNative CVE-2011-1146 0.8.1-27.el60.4 - Add missing checks for read-only connections CVE-2011-1146 0.8.1-27.el60.3 - Remove patches not suitable for proper Z-stream...

dbus security update

1:1.2.24-4 - Apply patch for CVE-2010-4352 - Resolves: 684852...

firefox security update

1.9.2.15-2.0.1.el60 - Replace xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js 1.9.2.15-2 - Fixed mozbz642395...

thunderbird security and bug fix update

3.1.9-3.0.1.el60 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 3.1.9-3 - Added fixes for mozbz642395 - ignore bogus Comodo certificates 3.1.9-2 - Update to 3.1.9...

seamonkey security update

1.0.9-68.0.1.el48 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-68.el4 - Added fixes for mozbz642395 - ignore bogus Comodo certificates...

wireshark security update

1.0.15-1.0.1.el56.4 - Added oracle-ocfs2-network.patch 1.0.15-1.4 - fix few security issues - Resolves: CVE -2011-0024 CVE-2011-0538 CVE-2011-1139 CVE-2011-1140 CVE-2011-1141 CVE-2011-1143 612240 1.0.15-1.3 - recompile with -fno-strict-aliasing 1.0.15-1.2 - fix buffer overflow in ENTTEC dissector...

wireshark security update

1.2.15-1.0.1.el60.1 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.2.15-1 - upgrade to 1.2.15 - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.14.html - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html - Resolves: CVE-2011-0444 CVE-2011-053...

Oracle Linux 6 Unbreakable Enterprise kernel security fix update

2.6.32-100.28.9.el6 - sync up the version 2.6.32-100.28.8.el6 - block check for proper length of iov entries earlier in blkrqmapuseriov Xiaotian Feng CVE-2010-4668 - scm: lower SCMMAXFD Eric Dumazet CVE-2010-4249 - perfevents: Fix perfcountermmap hook in mprotect Pekka Enberg CVE-2010-4169 - tcp:...

krb5 security update

1.8.2-3.6 - add revised upstream patch to fix double-free in KDC while returning typed-data with errors CVE-2011-0284, 681564 1.8.2-3.5 - add upstream patches to fix double-free in KDC while returning typed-data with errors CVE-2011-0284, 681564...

openldap security and bug fix update

2.3.43-12.7 - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success 680484 2.3.43-12.6 - fix: slapd concurrent access to connections causes slapd to silently die 677611...

openldap security update

2.4.19-15.2 - fix: security - DoS when submitting special MODRDN request 680975 2.4.19-15.1 - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success - fix: CVE-2011-1025 rootpw is not verified for ndb backend...

qemu-kvm security update

qemu-kvm-0.12.1.2-2.113.el60.8 - kvm-Revert-blockdev-Fix-drivedel-not-to-crash-when-driv.patch bz677170 - kvm-Revert-blockdev-check-dinfo-ptr-before-using-v2.patch bz677170 - kvm-Revert-Implement-drivedel-to-decouple-block-removal.patch bz677170 -...

scsi-target-utils security update

1.0.4-3.1 - fix the buffer overflow bug before iscsi login CVE-2011-0001...

vsftpd security update

2.2.2-6.el60.1 - Resolves: 681891 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern...

tomcat5 security update

0:5.5.23-0jpp.17 - Resolves: rhbz 674599 JDK Double.parseDouble DoS...

tomcat6 security and bug fix update

0:6.0.24-24 - Resolves: rhbz674601 - Removed wildcard in main %files that caused duplicate ownership - of log4j.properties 0:6.0.24-23 - Resolves: rhbz674601 - Reverse - tomcat user requires login shell - Reverse - rhbz 611244 tomcat-juli missing symlink - PM/QE decision to include only the...

kernel security update

2.6.32-71.18.2.el6 - fs sunrpc: Correct a misapplied patch J. Bruce Fields 678094 678146...

subversion security and bug fix update

1.6.11-7.3 - add fix for svnadmin hotcopy 681522 1.6.11-7.2 - add security fix for CVE-2011-0715 681171...

subversion security update

1.6.11-2.3 - add security fix for CVE-2011-0715 681173...

logwatch security update

7.3.6-49 - Added fix for CVE-2011-1018: Privilege escalation due improper sanitization of special characters in log file names Resolves: 680304...

libcgroup security update

0.36-6.1 - Fixed buffer overflow when parsing cgexec command line parameters. - Added checking of source of netlink messages to cgrulesengd daemon. - Resolves: CVE-2011-1006 CVE-2011-1022...

libtiff security update

3.9.4-1.el60.1 - Add fix for CVE-2011-0192 Resolves: 679298...

mailman security update

3:2.1.9-6.1 - fix 677845 - fixed CVE-2008-0564, CVE-2010-3089 and CVE-2011-0707...

kernel security and bug fix update

2.6.18-238.5.1.0.1.el5 - scsi fix scsi hotplug and rescan race orabug 10260172 - fix filpclose race Joe Jin orabug 10335998 - fix missing aiocomplete in endio Joel Becker orabug 10365195 - make xenkbd.abspointer=1 by default orabug 67188919 - xen check to see if hypervisor supports memory...

thunderbird security update

1.5.0.12-35.0.1.el4 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove thunderbird-redhat-default-prefs.js Replaced clean.gif in tarball 1.5.0.12-35 - Added fixes from 1.9.1.17...

firefox security and bug fix update

firefox: 3.6.14-4.0.1.el60 - Added firefox-oracle-default-prefs.js and removed firefox-redhat-default-prefs.js 3.6.14-4 - Update to build3 3.6.14-3 - Update to build2 3.6.14-2 - Update to 3.6.14 xulrunner: 1.9.2.14-3.0.1.el60 - Added xulrunner-oracle-default-prefs.js and removed the corresponding...

samba3x security update

3.5.4-0.70.1 - Security Release, fixes CVE-2011-0719 - resolves: 678332...

seamonkey security update

1.0.9-67.0.1.el48 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-67.el4 - Added fixes from 1.9.1.17...

thunderbird security update

3.1.8-4.0.2.el60 - Replace clean.gif in tarball 3.1.8-4.0.1.el60 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 3.1.8-4 - Update to build3 3.1.8-3 - Update to build2 3.1.8-2 - Update to 3.1.8...

mailman security update

3:2.1.12-14.2 - fix 677848 - fixed build problem without brew 3:2.1.12-14.1 - fix 677848 - fixed CVE-2010-3089 and CVE-2011-0707...

pango security update

1.28.1-3.el60.5 - Prevent an integer overflow in hbbufferensure Related: 679693 1.28.1-3.el60.4 - Check for realloc failures in hbbufferensure CVE-2011-0064...

samba security update

3.5.4-68.2 - Security Release, fixes CVE-2011-0719 - resolves: 678334...

sendmail security and bug fix update

8.13.1-6 - rpm attributes S,5,T not recorded for statistics file - fix specfile for passing rpm -V test 8.13.1-5 - recompile with -fno-strict-aliasing - fix typo, purge-mqueue script - remove README.certcnnul 8.13.1-4 - fix CVE-2009-4565 554987 - fix MAXHOSTNAMELEN 485380 - fix stale files in...

bash security and bug fix update

3.0-27 - Dont include backup files Resolves: 657500 3.0-26 - Fixed bash-3.0-tmpfile.patch Resolves: 657500 3.0-25 - Dont include backup files Resolves: 657500 3.0-24 - Use mktemp for temporary files Resolves: 657500 3.0-23 - bash globbing sometimes ignores locale settings Resolves: 539538 - check...

Oracle Linux 4.9 kernel security and bug fix update

2.6.9-100 -cxgb3: prevent reading uninitialized stack memory to fix xgbextensionioctl infoleak Eugene Teo 633153 CVE-2010-3296 -mlx4: disable MSI-X by default Andy Gospodarek 530596 -ext3: call fs invalidatepage instead of blockinvalidatepage Josef Bacik 488611 -av7110: check for negative array...

kernel security, bug fix, and enhancement update

2.6.32-71.18.1.el6 - netdrv ixgbe: make sure FCoE DDP user buffers are really released by the HW Frantisek Hrbata 674002 617193 - netdrv ixgbe: invalidate FCoE DDP context when no error status is available Frantisek Hrbata 674002 617193 - netdrv ixgbe: avoid doing FCoE DDP when adapter is DOWN or...

python security and bug fix update

2.3.4-14.9 - rgbimg module integer overflows CVE-2010-1450 Resolves: rhbz650936 2.3.4-14.8 - Backport fix for socket.htons on s390x from 2.4 patch 37 - Resolves: rhbz513341 - Backport fixes for grp.getgrgid patch 38 and for pwd.getpwuid patch 39 - Resolves: rhbz497540 - Backport fixes to strptime...

java-1.6.0-openjdk security update

1.6.0.0-1.39.b17 - respin of IcedTea6 1.7.10 - Resolves: rhbz676276 1.6.0.0-1.37.b17 - Updated to IcedTea6 1.7.10 - Resolves: rhbz676276...

dhcp security update

12:4.1.1-12.P1.2 - CVE-2011-0413: Unexpected abort caused by a DHCPv6 decline message 672994...

subversion security update

1.6.11-7.1 - add security fixes for CVE-2010-4644, CVE-2010-4539 672676...