java-1.6.0-openjdk security and bug fix update

1:1.6.0.0-1.2.b09.0.1.el5 - Add oracle-enterprise.patch 1:1.6.0.0-1.2.b09 - Updated release. - Moved java-1.6.0-openjdk-securitypatches.patch to java-1.6.0-openjdk-march24-securitypatches.patch. - Created new java-1.6.0-openjdk-july28-securitypatches.patch. - Updated release. - Resolves: rhbz5133...

kernel security and bug fix update

2.6.18-128.4.1.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

nspr and nss security and bug fix update

nspr: 4.7.4-1.el53.1 - create z-stream version 4.7.4-1 - Update to NSPR 4.7.4 nss: 3.12.3.99.3-1.el53.2 - adjust ssl cipher count constant bug 505650 3.12.3.99.3-1.el53.1 - create z-stream version 3.12.3.99.3-1 - updated to NSS3124FIPS1WITHCKBI175 3.12.3-5 - updated patch to seckey 3.12.3-4 - add...

seamonkey security update

1.0.9-0.41.0.1.el3 - Add mozilla-oracle-default-prefs.js, and mozilla-oracle-default-bookmarks.html and removed the corresponding RedHat ones 1.0.9-0.41.el3 - Added fixes for rhbz513780, rhbz512918...

bind security and bug fix update

20:9.2.4-25.el3 - security fix for remote DoS CVE-2009-0696, 514292 20:9.2.4-24.el3 - abort timeout queries to reduce the number of open UDP sockets 498164 - handle EMFILE error from accept gracefully 498164...

bind security and bug fix update

20:9.2.4-30.4 - security fix for remote DoS CVE-2009-0696, 514292 20:9.2.4-30.3 - fix potential deadlock on socket's control FDs 512668...

bind security update

30:9.3.4-10.P1.3 - fix namedsdb as well CVE-2009-0696, 514292 30:9.3.4-10.P1.2 - security fix for remote DoS CVE-2009-0696, 514292...

python security update

2.4.3-24.el53.6 - Fix all of the low priority security bugs: - Resolves: rhbz486351 - Multiple integer overflows in python core CVE-2008-2315 - Resolves: 455008 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Resolves: 443810 - Multiple integer overflows...

python security update

2.3.4-14.7.el48.2 - Fix all of the low priority security bugs: - Resolves: rhbz486329 - Multiple integer overflows in python core CVE-2008-2315 - Resolves: 455008 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Resolves: 443810 - Multiple integer overflows...

python security update

2.2.3-6.11 - Fix all of the low priority security bugs: - Resolves: rhbz486114 - Multiple integer overflows in python core CVE-2008-2315 - Resolves: 455008 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Resolves: 443810 - Multiple integer overflows discovered ...

firefox security update

firefox: 3.0.12-1.0.1.el53 - Update firstrun and homepage URLs - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed the corresponding Red Hat ones - Added patch oracle-firefox-branding.patch 3.0.12-1 - Update to 3.0.12 xulrunner: 1.9.0.12-1.0.1.el53 - Added...

seamonkey security update

1.0.9-45.0.1.el48 - Added mozilla-oracle-default-prefs.js, and mozilla-oracle-default-bookmarks.html and removed corresponding Redhat ones 1.0.9-45.el4 - Added fixes from 1.9.0.12...

nspr and nss security, bug fix, and enhancement update

nspr: 4.7.4-1.el53.1 - create z-stream version 4.7.4-1 - Update to NSPR 4.7.4 nss: 3.12.3.99.3-1.0.1.el53.2 - Update clean.gif in the nss-3.12.3.99.3-stripped.tar.bz2 tarball 3.12.3.99.3-1.el53.2 - adjust ssl cipher count constant bug 505650 3.12.3.99.3-1.el53.1 - create z-stream version...

tomcat security update

5.5.23-0jpp.7.2 - Actually add the patch files this time Resolves: rhbz427779 Resolves: rhbz504758 Resolves: rhbz503980 Resolves: rhbz504162 5.5.23-0jpp.7.2 - add patch for CVE-2007-5333 Resolves: rhbz427779 - add patch for CVE-2008-5515 Resolves: rhbz504758 - add patch for CVE-2009-0033 - add...

libtiff security update

3.8.2-7.el5.4 - Fix buffer overrun risks caused by unchecked integer overflow CVE-2009-2347 Resolves: 507725 3.8.2-7.el5.3 - Fix some more LZW decoding vulnerabilities CVE-2009-2285 Resolves: 507725 - Update upstream URL...

dhcp security update

3.0.1-65.1 - Correct package NVR Related: rhbz507736 3.0.1-65.EL4.1 - Fix for CVE-2009-0692 Resolves: rhbz507736...

dhcp security update

7:3.0.1-10.2EL3 - Make sure fix for 507734 is included Related: rhbz507734 7:3.0.1-10.1EL3 - Fix for CVE-2009-0692 Resolves: rhbz507734...

httpd security update

2.2.3-22.0.1.el53.2 - Replace index.html with Oracle's index page oracleindex.html - Update vstring and distro in specfile 2.2.3-22.el53.2 - add security fixes for CVE-2009-1890, CVE-2009-1891 509782...

pidgin security and bug fix update

2.5.8-1 - 2.5.8 with several important bug fixes 2.5.7-2 - glib2 compat with RHEL-4 2.5.7-1 - 2.5.7 with Yahoo Protocol 16 support 2.5.6-1 - 2.5.6 2.5.5-3 - F12+ removed krb4...

openswan security update

2.6.14-1.3 - security update CVE-2009-2185 Resolves: CVE-2009-2185...

ruby security update

1.8.5-5.el53.7 - security fixes. 505087 - CVE-2007-1558: APOP password disclosure vulnerability. - CVE-2009-0642: Incorrect checks for validity of X.509 certificates. - CVE-2009-1904: DoS vulnerability in BigDecimal...

kernel security and bug fix update

2.6.9-89.0.3.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidanc...

seamonkey security update

1.0.9-44.0.1.el48 - Added mozilla-oracle-default-prefs.js, and mozilla-oracle-default-bookmarks.html and removed corresponding Redhat ones 1.0.9-44.el4 - Added fix for mozbz495057...

net-snmp security update

5.0.9-2.30E.28 - fix another crash in bulk request processing 469369...

icu security update

3.6-5.11.4 - Resolves: rhbz505159 CVE-2009-0153 guarantee abi 3.6-5.11.3 - Resolves: rhbz505159 CVE-2009-0153...

kdelibs security update

3.5.4-22.0.1.el53 - Remove Version branding - Maximum rpm trademark logos removed pics/crystalsvg/-mime-rpm in tarball 3.5.4-22 - Resolves: 505621, CVE-2009-1687, integer overflow in KJS JavaScript garbage collector CVE-2009-1698, KHTML CSS parser - incorrect handling CSS style attribute content...

gstreamer-plugins-good security update

0.10.9-1.el5.2 - CVE-2009-1932: Integer overflow in PNG decoder...

thunderbird security update

1.5.0.12-23.0.1.el4 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove thunderbird-redhat-default-prefs.js - Replaced clean.gif in tarball 1.5.0.12-23 - Added fix for mozbz495057 1.5.0.12-22 - Added build fix 1.5.0.12-21 - Update patchset to fix regression as per 1.9.0.11...

kdelibs security update

kdelibs 6:3.1.3-6.13.0.1 - Remove Version branding in specfile - Maximum rpm trademark logos removed pics/crystalsvg/mime-rpm.png in tarball 6:3.1.3-6.13 - Resolves: 505618, CVE-2009-1698, KHTML CSS parser - incorrect handling CSS style attribute...

cyrus-imapd security update

2.3.7-2.2 - add -fno-strict-aliasing to cflags 2.3.7-2.1 - fix saslencode64's buffers 505427...

kernel security and bug fix update

2.6.18-128.1.14.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

httpd security update

2.0.46-73.0.1.ent - use oracle index page oracleindex.html - remove logos in poweredby.gif and poweredbyrh.png - add apr-configure.patch 2.0.46-73.ent - forcibly disable SCTP support in APR 2.0.46-72.ent - add security fixes for CVE-2009-0023, CVE-2009-1955, and CVE-2009-1956 apr-util 504562...

apr-util security update

1.2.7-7.el53.1 - add security fixes for CVE-2009-0023, CVE-2009-1955, and CVE-2009-1956 504560...

cscope security update

15.5-15.1.el53.1 - Release bump to create newer nvr despite dist tag change fc6 - el5 15.5-15.el53.4 - Merge incdir-overflow and snprintf patches for better readability, snprintf is used now with PATHLEN limit without other adjustments, related strlen / %.s / len are no longer needed and were...

cscope security update

15.5-10.RHEL4.3 - Merge incdir-overflow and snprintf patches for better readability, snprintf is used now with PATHLEN limit without other adjustments, related strlen / %.s / len are no longer needed and were dropped - Update tempsec patch, drop extraneous snprintf argument to suppress compiler...

wireshark security update

1.0.8-1.0.1.el53.1 - Add oracle-ocfs2-network.patch 1.0.8-1.1 - bump release to match Z-stream/EUS NVR policy - Resolves: 501950 1.0.8-1 - upgrade to 1.0.8 - Resolves: 501950...

firefox security update

firefox: 3.0.11-2.0.1.el53 - Update firstrun and homepage URLs - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed the corresponding Red Hat ones - Added patch oracle-firefox-branding.patch 3.0.11-2 - Update due to respin 3.0.11-1 - Update to 3.0.11 xulrunner...

seamonkey security update

1.0.9-43.0.1.el48 - Added mozilla-oracle-default-prefs.js, and mozilla-oracle-default-bookmarks.html and removed corresponding Redhat ones 1.0.9-43.el4 - Added fixes from 1.9.0.11...

cups security update

1:1.1.22-0.rc1.9.32:.3 - Updated patch to fix CVE-2009-0791 to treat also cases gmallocint C + int nObjs int objSize bug 491840. 1:1.1.22-0.rc1.9.32:.2 - Applied patch to fix CVE-2009-0949 bug 500972. 1:1.1.22-0.rc1.9.32:.1 - Applied patch to fix CVE-2009-0791 bug 491840. - Applied patch to fix...

cups security update

1:1.3.7-8:.6 - Applied patch to fix CVE-2009-0791 bug 491840. 1:1.3.7-8:.5 - Applied patch to fix CVE-2009-0949 bug 500972...

httpd security update

2.2.3-22.0.1.el53.1 - Replace index.html with oracle's index page oracleindex.html - Update vstring and distro in specfile 2.2.3-22.el53.1 - add security fixes for CVE-2008-1678, CVE-2009-1195 499284...

util-linux security and bug fix update

2.12a-24.el4 - fix 458539 - man nfs : wrong information about nfs version used 2.12a-23.el4 - fix 485004 - move mount doesnt correctly update mtab 2.12a-22.el4 - fix 472186 - mount -a has problems with duplicate labels in a mpath setup - fix 471372 - RHEL4: fdisk cannot create partition with...

Oracle Enterprise Linux 4.8 kernel security and bug fix update

2.6.9-89 -fix regression in cxgb3 driver spinlock usage Andy Gospodarek 495557 -cxgb3: fixup possible workqueue deadlocks Andy Gospodarek 495558 -e1000: network driver doesn t reset nic during shutdown and prevents pxe reloads George Beshers 465620 -cxgb3: fix msix bringup so we dont leak vectors...

squirrelmail security update

1.4.8-5.0.1.el53.7 - Remove Redhat splash screen images 1.4.8-5.7 - fix broken patch for CVE-2009-1579 1.4.8-5.6 - fix broken patch for CVE-2009-1579 1.4.8-5.5 - don't ship patch backup files 1.4.8-5.4 - fix: CVE-2009-1581 : CSS positioning vulnerability - fix: CVE-2009-1579 : Server-side code...

pidgin security update

2.5.5-2 - Security/DoS fixes from 2.5.6 CVE-2009-1373-8331e31a CVE-2009-1374-ad057b75 2c9a1153 CVE-2009-1375-7829ec76 CVE-2009-1376-9dd1c4c3...

freetype security update

2.1.9-10.el4.7 - Improve freetype-1.4pre-CVE-2008-1808.patch 2.1.9-9.el4.7 - Add freetype-2009-CVEs.patch Fixes CVE-2009-0946 Doesn't apply to freetype1 - Add freetype-1.4pre-CVE-2008-1808.patch Corresponds to freetype-2.3.5-CVEs.patch - Add freetype-pre1.4-ttf-overflow.patch Corresponds to...

nfs-utils security and bug fix update

1.0.6-93.EL4 - Updated the tcpwrapper code to handle hostnames bz 467312 1.0.6-92.EL4 - Rebuilt to fix tcpwrapper dependency on x8664 archs. 1.0.6-91.EL4 - Added a run-time dependency on the tcpwrapper package. 1.0.6-90.EL4 - Fixed lockd not using settings in sysconfig/nfs bz 461043 - Fixed...

freetype security update

2.2.1-21 - Add freetype-2009-CVEs.patch - Resolves: 496111...

pidgin security update

1.5.1-3 - CVE-2009-1373 - CVE-2009-1376...

ntp security update

4.2.0.a.20040617-8.el47.2 - fix buffer overflow when parsing Autokey association message 500781, CVE-2009-1252 - fix buffer overflow in ntpq 500781, CVE-2009-0159...