cups security update

1:1.3.7-11:.3 - Include NULL pointer check in ObjectStream::getObject. Part of the fix for CVE-2009-3608 bug 526637. 1:1.3.7-11:.2 - Applied patch to fix CVE-2009-3608 bug 526637 and CVE-2009-3609 bug 526893...

kdegraphics security update

3.3.1-15.2 - Add missing NULL check to CVE-2009-3608 patch 3.3.1-15.1 - CVE-2009-0791...

gpdf security update

2.8.2-7.7.2.el48.5 - Fixes various flaws addressed in bugs 491840 CVE-2009-0791, - Resolves: 527413...

poppler security and bug fix update

0.5.4-4.4.el54.11 - Fixes various flaws addressed in bugs 526637, 526893 and 526915 which were tracked in 527403. - Resolves: 527403 0.5.4-4.4.el54.10 - Add poppler-0.5.4-JBIG2-segment-reading.patch to fix reading of arithmetically encoded JBIG2 images with unknown length. - Resolves: 528147...

xpdf security update

2.02-17.el3 - Resolves: 527470, CVE-2009-0791 2.02-16.el3 - Resolves: 527470, CVE-2009-0791 2.02-15.el3 - Resolves: 527470, CVE-2009-0791...

xpdf security update

3.00-22.1 - Resolves: 527468, CVE-2009-0791 3.00-22.el4 - CVE-2009-0791 3.00-21.el4 - CVE-2009-0791...

squirrelmail security update

1.4.8-5.0.1.el54.10 - Remove Redhat splash screen images 1.4.8-5.10 - fix: CVE-2009-2964 : CSRF issues in all forms - extend to all forms 1.4.8-5.9 - fix: CVE-2009-2964 : CSRF issues in all forms - add missing parts 1.4.8-5.8 - fix: CVE-2009-2964 : CSRF issues in all forms...

postgresql security update

8.1.18-2.el54.1 - Remove unnecessary .o file that confuses TPS tests Related: 525284 8.1.18-1.el54.1 - Update to PostgreSQL 8.1.18 to fix CVE-2009-0922, CVE-2009-3230, and assorted other bugs described at http://www.postgresql.org/docs/8.1/static/release.html Resolves: 525284...

postgresql security update

7.3.21-2 - Fix CVE-2009-3230 back-ported upstream patch Resolves: 525322...

xen security and bug fix update

3.0.3-94.el54.1 - Fix race condition on domain reboot rhbz 525143 - Avoid multiple restarts of a domain rhbz 525141 - Add grub.conf password protection support to pygrub rhbz 525142 - Ignore unimplemented PHYSDEVOPmappirq rhbz 525149...

elinks security update

0.11.1-6.1 - fix 235411 - CVE-2007-2027 - elinks tries to load .po files from non-absolute path - fix 523258 - CVE-2008-7224 - entitycache static array buffer overflow...

openssh security update

4.3p2-36.2 - minimize chroot patch to be compatible with upstream 522141...

kvm security and bug fix update

83-105.0.1.el54.7 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.7 - kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch bz524557 - Resolves: bz524557 QEMU crash during virtio-net WHQL tests for Win2008 R2 kvm-83-105.el54.6 -...

kernel security and bug fix update

2.6.18-164.2.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug 69930...

newt security update

0.52.2-12.el54.1 - fix buffer overflow in textbox when reflowing 524618, CVE-2009-2905...

cyrus-imapd security update

2.3.7-7.0.1.el54.3 - Enabled lmsensors-devel build dependency for x86 and x8664 only 2.3.7-7.3 - fix more buffer overflows in cyrus sieve CVE-2009-3235 2.3.7-7.2 - bump release for rebuild 2.3.7-7.1 - fix buffer overflow in cyrus sieve 521011...

pidgin security update

2.6.2-2 - Upstream backports: 97e003ed2bc2bafbb993693c9ae9c6d667731cc1 aim-buddy-status-grab 37aa00d044431100d37466517568640cb082680c yahoo-buddy-idle-time 40005b889ee276fbcd0a4e886a68d8a8cce45698 yahoo-status-change-away cb46b045aa6e927a3814d9053c2b1c0f08d6fa62 crash-validate-jid 2.6.2-1.1 - VV...

neon security update

0.25.5-10.el54.1 - add security fixes for CVE-2009-2473 CVE-2009-2474 521788...

freeradius security update

1.1.3-1.5 - Security: Fix Tunnel-Password zero-length attributes flaw bug 521912 Resolves: RH BZ522062 - rebase a couple of old patches freeradius-0.9.0-comerr.patch, freeradius-1.0.0-samba3.patch so they apply with fuzz=0...

kernel security and bug fix update

2.6.9-89.0.11.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidan...

firefox security update

firefox: 3.0.14-1.0.1.el54 - Update firstrun and homepage URLs in specfile - Added patch oracle-firefox-branding.patch - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed the corresponding Red Hat ones 3.0.14-1 - Update to 3.0.14 3.0.13-1 - Update to 3.0.13...

seamonkey security update

1.0.9-48.0.1.el48 - Added mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and removed corresponding Redhat ones 1.0.9-48.el4 - More 1.9.0.14 fixes 1.0.9-47.el4 - Added fixes from 1.9.0.14 1.0.9-46.el4 - Added fixes from 1.9.0.13...

xmlsec1 security update

1.2.9-8.1.1 - Fix a security issue on short hmac lenght CVE-2009-0217 - Resolves: rhbz516724...

fetchmail security update

6.3.6-1.1.el53.1 - Fix fetchmail various flaws CVE-2007-4565, CVE-2008-2711, CVE-2009-2666 Resolves: 516269...

seamonkey security update

1.0.9-0.45.0.1.el3 - Add mozilla-oracle-default-prefs.js, and mozilla-oracle-default-bookmarks.html and removed the corresponding RedHat ones. 1.0.9-0.45.el3 - More 1.9.0.14 fixes 1.0.9-0.44.el3 - Added fixes from 1.9.0.14 1.0.9-0.43.el3 - Removed rhbz513780 - Added fixes from 1.9.0.13...

lftp security and bug fix update

3.7.11-4 - Resolves: 461922 - lftp 'help mirror' does not display all options defined in manpage 3.7.11-3 - Resolves: 504594 - Alias ''edit' has multiple flaws 3.7.11-2 - Resolves: 504591 - Problems with spaces in file names over HTTP - Resolves: 504594 - Alias ''edit' has multiple flaws 3.7.11-1...

ecryptfs-utils security, bug fix, and enhancement update

75-4 - fix EOF handling 499367 - add icon to gui desktop file 75-3 - ask for password confirmation when creating openssl key 500850 - removed executable permission from ecryptfs-dot-private 500817 - ecryptfs-rewrite-file: improve of progress output 500813 - dont error out when unwrapping and addi...

gdm security and bug fix update

1:2.16.0-56 - Resolves: 239818 181302 - Fix tcp wrappers detection on 64-bit 1:2.16.0-55 Resolves: 196054 - Fix docs subpackage Requires 1:2.16.0-53 Resolves: 196054 - Add docs subpackage 1:2.16.0-52 Resolves: 226931 - Add teIN translations 1:2.16.0-51 Resolves: 441971 - Make ctrl-alt-backspace a...

nfs-utils security and bug fix update

1.0.9-42 - mountd: Check host alias with netgroups bz 478952 - exportfs: fixed typo in man page bz 474848 - nfs.init: NFS server reboot results in 'Stale NFS file handle' bz 474449 - nfslock.init: options not correctly parsed bz 459591 - mount.nfs: mounts fail with read-only /etc bz 450646 -...

cman security, bug fix, and enhancement update

2.0.115-1 - RSA II fencing agent has been fixed. - Resolves: rhbz493802 2.0.114-1 - local variable 'verbosefilename' referenced before assignment has been fixed - RSA II fencing agent has been fixed. - Resolves: rhbz493802 rhbz514758 2.0.113-1 - Limitations with 2-node fencescsi are now properly...

rgmanager security, bug fix, and enhancement update

2.0.52-1.0.1 - Update summary and description to be vendor neutral 2.0.52-1 - When vm.sh does a status check and gets 'no state' it is now treated as a running state. - Resolves: rhb514044 2.0.51-1 - In some cases virtual machines will be restarted after a successful migration when the cluster...

Oracle Enterprise Linux 5.4 kernel security and bug fix update

2.6.18-164.el5 - misc information leak in sigaltstack Vitaly Mayatskikh 515396 - misc execve: must clear current-clearchildtid Oleg Nesterov 515429 - net igb: set lan id prior to configuring phy Stefan Assmann 508870 - net udp: socket NULL ptr dereference Vitaly Mayatskikh 518043 CVE-2009-2698...

gfs2-utils security and bug fix update

0.1.62-1 - Fix man page references to fsck.gfs2. - Resolves: rhbz477072 0.1.61-1 - fsck.gfs2 no longer segfaults when fixing 'EA leaf block type' problems. - Resolves: rhbz510758 0.1.60-1 - When '/' is a gfs2 file system it is now properly mounted without an error. - Resolves: rhbz507893 0.1.59-1...

openssl security, bug fix, and enhancement update

0.9.8e-12 - abort if selftests failed and random number generator is polled - mention EVPaes and EVPsha2xx routines in the manpages - add README.FIPS 0.9.8e-10 - fix CVE-2009-1386 CVE-2009-1387 DTLS DoS problems 503685, 503688 0.9.8e-9 - fix CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 DTLS DoS...

mysql security and bug fix update

5.0.77-3 - Add fix for CVE-2009-2446 format string vulnerability in COMCREATEDB and COMDROPDB processing Resolves: 512200 5.0.77-2 - Back-port upstream fix for CVE-2008-4456 mysql command line client XSS flaw Resolves: 502169 5.0.77-1 - Update to MySQL 5.0.77, for numerous fixes described at...

openssh security, bug fix, and enhancement update

4.3p2-36 - tiny change in chroot sftp capability into openssh-server solve ls speed problem 440240 4.3p2-35 - workaround to plaintext recovery attack against CBC ciphers CVE-2008-5161 502230 4.3p2-34 - disable protocol 1 in the FIPS mode 4.3p2-33 - fix scp hangup on exit 454812 - call integrity...

openoffice.org security update

1.1.5-10.0.7.1 - Resolves: rhbz519164 openoffice.org various flaws - CVE-2009-0200, CVE-2009-0201...

dnsmasq security update

2.45-1.1.el5 - problems with strings when enabling tftp CVE-2009-2957 and CVE-2009-2957 - Resolves: rhbg519021...

kernel security update

2.4.21-60.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-60.EL - Fix null...

gnutls security update

1.4.1-3.5 - fix NUL characters in DN and SAN cert fields issue, make sure gnutlsx509crtcheckhostname fails when certificate has no CN or SAN CVE-2009-2730 516231...

kernel security and bug fix update

2.6.18-128.7.1.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

kernel security update

2.6.9-89.0.9.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidanc...

pidgin security update

2.5.9-1 - CVE-2009-2694...

libvorbis security update

1:1.1.2-3.el5.3 - fix CVE-2009-2663 Resolves: 516348...

curl security update

7.15.5-2.1.el53.5 - fix CVE-2009-2417 516257...

kernel security and bug fix update

2.6.9-89.0.7.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidanc...

subversion security update

1.4.2-4.0.1.el53.1 - Add oracle-enterprise.patch 1.4.2-4.el53.1 - add security fix for CVE-2009-2411 515817...

libxml and libxml2 security update

libxml: 1:1.8.17-9.3 - fix a couple of crash - Resolves: rhbg515226 libxml2: 2.6.26-2.1.2.8.0.1 - Add libxml2-enterprise.patch and update logos in tarball 2.6.26-2.1.2.8 - Fix a couple of crash CVE-2009-2414 and CVE-2009-2416 - Resolves: rhbz515236...

httpd security and bug fix update

2.0.46-75.0.1.ent - use oracle index page oracleindex.html - remove logos in poweredby.gif and poweredbyrh.png - add apr-configure.patch 2.0.46-75.ent - add security fix for CVE-2009-1891 515705 - include fix for upstream PR 39605 2.0.46-74.ent - add security fixes for CVE-2009-2412 515705 - add...

apr and apr-util security update

apr: 1.2.7-11.1 - add security fix for CVE-2009-2412 515709 apr-util: 1.2.7-7.el53.2 - add security fix for CVE-2009-2412 515713...