kernel security, bug fix, and enhancement update

2.6.32-131.12.1.el6 - netdrv be2net: clear intr bit in beprobe Ivan Vecera 726308 722596 2.6.32-131.11.1.el6 - mm hold the page lock until after setpagestablenode Andrea Arcangeli 726095 683658 - netdrv be2net: remove certain cmd failure logging Ivan Vecera 725329 719304 - net nl80211: missing...

libvirt security and bug fix update

0.8.7-18.0.1.el61.1 - Replace docs/et.png in tarball with blank image libvirt-0.8.7-18.el61.1 - debug: Avoid null dereference on uuid lookup api rhbz728546 - Fix auditing of disk hotunplug operations rhbz728516 - storage: Fix regression with backing format rhbz726617 - Fix performance problem of...

system-config-printer security update

0.7.32.10-1.0.1.el57.1 - Add oracle-bug-reporting.patch 0.7.32.10-1:.1 - Applied patch to fix CVE-2011-2899 bug 728348...

Oracle Linux 6 Unbreakable Enterprise kernel security and bug fix update

2.6.32-200.16.1.el6uek - Revert change to restore DEFAULTKERNEL 2.6.32-200.15.1.el6uek - Add -u parameter to kernelvariantpost to make it work properly for uek orabug 12819958 2.6.32-200.14.1.el6uek - Restore DEFAULTKERNEL value to kernel-uek orabug 12819958 2.6.32-200.13.1.el6uek - make default...

dovecot security update

1:2.0.9-2.1 - fix potential crash when parsing header names that contain NUL characters 728672...

firefox security update

firefox: 3.6.20-2.0.1.el61 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 3.6.20-2 - Update to 3.6.20 xulrunner: 1.9.2.20-2.0.1.el61 - Replace xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js 1.9.2.20-2 - Update to 1.9.2.20...

seamonkey security update

1.0.9-72.0.1.el4 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-72.el4 - Added fixes from 1.9.2.20...

thunderbird security update

1.5.0.12-40.0.1.el4 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove thunderbird-redhat-default-prefs.js - Replaced clean.gif in tarball 1.5.0.12-40 - Added fixes from 1.9.2.20...

thunderbird security update

3.1.12-1.0.1.el61 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 3.1.12-1 - Update to 3.1.12...

dhcp security update

12:4.1.1-19.P1.1 - A pair of defects cause the server to halt upon processing certain packets CVE-2011-2748, CVE-2011-2749, 729883...

freetype security update

2.1.9-19.el4 - Add freetype-2.1.9-CVE-2011-2895.patch Prevent stackp to overflow. - Resolves: 729317...

xorg-x11 security update

6.8.2-1.0.1.EL.69 - Add Enterprise Linux detection - Add XFree86-4.3.0-oracle-bug-report-address-update.patch 6.8.2-1.EL.69 - cve-2011-2895.patch: Prevent heap corruption/infinite loop 725760...

libXfont security update

1.4.1-2 - cve-2011-2895.patch: LZW decompression heap corruption...

dbus security update

1:1.2.24-5 - Merge changes from RHEL-6 branch: Drop default patch fuzz Merge CVE-2010-4352.patch from RHEL-60-Z - Apply patches for CVE-2011-2200 - Resolves: 725313...

foomatic security update

3.0.2-38.3:.1 - Applied patch to fix improper sanitization of command line options CVE-2011-2697, bug 721001...

systemtap security update

1.3-9 - bz716489 patch...

foomatic security update

4.0.4-1:.1 - Applied patch to fix improper sanitization of command line options CVE-2011-2697, bug 721001...

libpng security update

2:1.2.10-7.1.el57.5 - Install the correct fix for CVE-2011-2690 Resolves: 721303 2:1.2.10-7.1.el57.4 - Back-port fixes for CVE-2011-2690, CVE-2011-2692 Note: CVE-2011-2691, announced at the same time, does not apply to 1.2.10; likewise for CVE-2011-2501 Resolves: 721303...

libvirt security, bug fix, and enhancement update

0.8.2-22.0.1.el5 - Replaced docs/et.png in tarball libvirt-0.8.2-22.el5 - Fix auditing of disk hotunplug operations rhbz710151 libvirt-0.8.2-21.el5 - remote: Protect against integer overflow rhbz717207 0.8.2-20.el5 - Support enabling or disabling the HPET for Xen domains rhbz703193 - SMBIOS suppo...

Oracle Linux 5.7 kernel security and bug fix update

2.6.18-274.el5 - xen svm: fix invlpg emulator regression Paolo Bonzini 719894 2.6.18-273.el5 - Revert: fs proc: Fix rmmod/read/write races in /proc entries Jarod Wilson 717068 - xen disregard trailing bytes in an invalid page Paolo Bonzini 717742 - xen prep getinstructionlengthfromlist for partia...

bash security, bug fix, and enhancement update

3.2-32 - Dont include backup files Resolves: 700157 3.2-31 - Use 'mktemp' for temporary files Resolves: 700157 3.2-30 - Added man page references to systemwide .bashlogout Resolves: 592979 3.2-29 - Readline glitch, when editing line with more spaces and resizing window Resolves: 525474 3.2-28 - F...

rgmanager security, bug fix, and enhancement update

2.0.52-21 - rgmanager: Fix bad passing of SFLFAILURE up fixbadpassingofsflfailureup.patch Resolves: rhbz711521 2.0.52-20 - resource-agents: Improve LDLIBRARYPATH handling by SAP resourceagentsimproveldlibrarypathhandlingbysap.patch Resolves: rhbz710637 2.0.52-19 - Fix changelog format - rgmanager...

rsync security, bug fix, and enhancement update

3.0.6-4 - fix 700450 - free parsed hostnames - fix 575022 - set TZ variable after chroot 3.0.6-3 - Add upstream patch to fix CVE-2011-1097 - Incremental file-list corruption due to temporary fileextracnt increments Resolves: 688923 3.0.6-2 - Remove BuildRequires dependency on popt-devel, until th...

sysstat security, bug fix, and enhancement update

7.0.2-11 - Related: 716959 fix cve-2007-3852 - sysstat insecure temporary file usage 7.0.2-10 - Resolves: 716959 fix cve-2007-3852 - sysstat insecure temporary file usage 7.0.2-9 - Related: 622557 sar interrupt count goes backward 7.0.2-8 - Resolves: 694767 iostat doesn't report statistics for...

sssd security, bug fix, and enhancement update

1.5.1-37 - Reverts: rhbz680443 - Dynamic DNS update fails if multiple servers are - given in ipaserver config option 1.5.1-36 - Resolves: rhbz709333 - sssd. should require sssd-client. 1.5.1-35 - Resolves: rhbz707340 - latest sssd fails if ldapdefaultauthtoktype is - not mentioned - Resolves:...

libpng security update

2:1.2.46-1 - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690, CVE-2011-2691, CVE-2011-2692 Resolves: 721305...

libsoup security update

2.28.2-1.1 - Patch for CVE-2011-2524...

libpng security update

libpng: 2:1.2.7-8 - Remove incorrect fix for CVE-2011-2690; that bug doesn't exist in 1.2.7 Resolves: 721302 2:1.2.7-7 - Back-port fixes for CVE-2011-2690, CVE-2011-2692 Note: CVE-2011-2691, announced at the same time, does not apply to 1.2.7; likewise for CVE-2011-2501 Resolves: 721302 libpng10:...

icedtea-web security update

1.0.4-2 - Added patch to make plugin table size mismatch a warning instead of error 1.0.4-1 - Bump to 1.0.4 - Resolves rhbz718180...

systemtap security update

1.4.6.0.1.el61.2 - remove doc/SystemTapBeginnersGuide/en-US in tarball - comment bz683569.patch in specfile 1.4-6.2 - bz716476 patch - bz716489 patch...

freetype security update

2.3.11-6.el61.6 - A little change in configure part - Resolves: 723467 2.3.11-6.el61.5 - Use -fno-strict-aliasing instead of attributemayalias - Resolves: 723467 2.3.11-6.el61.4 - Allow FTGlyph to alias to pass Rpmdiff - Resolves: 723467 2.3.11-6.el61.3 - Add freetype-2.3.11-CVE-2011-0226.patch A...

libsndfile security update

1.0.20-3.1 - fixes integer overflow by processing certain PAF audio files 722841...

fuse security update

2.8.3-3 - Bump the release since the bz was set to the wrong target 2.8.3-2 - Fix another umount race bz 673250, CVE-2010-3879...

mutt security update

1.5.20-2.20091214hg736b6a.el61.1 - Fixed hostname verification of x.509 certificates. Resolves: 716889 CVE-2011-1429...

system-config-firewall security update

system-config-firewall: 1.2.27-3.3 - fixed possible privilege escalation flaw via use of python pickle CVE-2011-2520, replaced pickle by json rhbz717985 - stop D-BUS firewall mechanism on update system-config-printer: 1.1.16-17:.2 - Build pycups with -fno-strict-aliasing compiler option to avoid...

kernel security and bug fix update

2.6.18-238.19.1.0.1.el5 - scsi remove printk's when doing I/O to a dead device John Sobecki, Chris Mason orabug 12342275 - char ipmi: Fix IPMI errors due to timing problems Joe Jin orabug 12561346 - scsi Fix race when removing SCSI devices Joe Jin orabug 12404566 - bonding: reread information abo...

Oracle Linux 6 Unbreakable Enterprise kernel security fix update

2.6.32-100.37.1.el6uek - net gre: fix netns vs proto registration ordering CVE-2011-1767 - net tunnels: fix netns vs proto registration ordering CVE-2011-1768...

NetworkManager security update

0.8.1-9el61.1 - core: CVE-2011-2176: check for authorization when activating shared wifi connections rh 705806...

kernel security and bug fix update

2.6.32-131.6.1.el6 - audit ia32entry.S sign extend error codes when calling 64 bit code Eric Paris 713831 703935 - audit push audit success and retcode into arch ptrace.h Eric Paris 713831 703935 - x86 intel-iommu: Flush unmaps at domainexit Alex Williamson 713458 705441 - x86 intel-iommu: Only...

bind security update

32:9.7.3-2.2.P3 - update to 9.7.3-P3 CVE-2011-2464...

curl security update

7.19.7-26.el61.1 - do not delegate GSSAPI credentials CVE-2011-2192...

qemu-kvm security and bug fix update

qemu-kvm-0.12.1.2-2.160.el61.2 - kvm-virtio-guard-against-negative-vq-notifies.patch bz717403 - Resolves: bz717403 qemu-kvm: OOB memory access caused by negative vq notifies rhel-6.1.z qemu-kvm-0.12.1.2-2.160.el61 - kvm-Fix-phys-memory-client-pass-guest-physical-address-n.patch bz701771 -...

krb5-appl security update

1.0.1-2.1 - ftpd: add candidate patch to detect setegid/setregid/setresgid and check for errors when calling them MITKRB5-SA-2011-005, CVE-2011-1526, 713341...

ruby security update

1.8.7.299-7.1 - Address CVE-2011-1004 'Symlink race condition by removing directory trees in fileutils module' ruby-1.8.7-CVE-2011-1004.patch - Address CVE-2011-1005 'Untrusted codes able to modify arbitrary strings' ruby-1.8.7-CVE-2011-1005.patch - Address CVE-2011-0188 'memory corruption in...

ruby security update

1.8.5-19.el56.1 - Address CVE-2011-1004 'Symlink race condition by removing directory trees in fileutils module' ruby-1.8.7-CVE-2011-1004.patch - Address CVE-2011-1005 'Untrusted codes able to modify arbitrary strings' ruby-1.8.7-CVE-2011-1005.patch - Address CVE-2011-0188 'memory corruption in...

ruby security update

1.8.1-16.el4 - Comply with guidelines - Related: rhbz709959 1.8.1-15.el4 - Address CVE-2011-1005 'Untrusted codes able to modify arbitrary strings' ruby-1.8.7-CVE-2011-1005.patch - Address CVE-2011-0188 'memory corruption in BigDecimal on 64bit platforms' ruby-1.8.7-CVE-2011-0188.patch - Address...

firefox security and bug fix update

firefox: 3.6.18-1.0.1.el61 - Added firefox-oracle-default-prefs.js and removed firefox-redhat-default-prefs.js 3.6.18-1 - Update to 3.6.18 xulrunner: 1.9.2.18-2.0.1.el61 - Replace xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js 1.9.2.18-2 - Update to 1.9.2.18...

seamonkey security update

1.0.9-71.0.1.el4 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-71.el4 - Added fixes from 1.9.2.18...

thunderbird security update

3.1.11-1.0.1.el61 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 3.1.11-2 - Update to 3.1.11...

thunderbird security update

1.5.0.12-38.0.1.el4 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove thunderbird-redhat-default-prefs.js - Replaced clean.gif in tarball 1.5.0.12-39 - Added fixes from 1.9.2.18...