10062 matches found
freeradius security update
2.1.12-4 - resolves: bug855316 CVE-2012-3547 freeradius: Stack-based buffer overflow by processing certain expiration date fields of a certificate during x509 certificate validation...
kernel security and bug fix update
kernel 2.6.18-308.16.1.el5 - Revert: fs nfsd4: Remove check for a 32-bit cookie in nfsd4readdir Eric Sandeen 847943 784191 - Revert: fs add new FMODE flags: FMODE32bithash and FMODE64bithash Eric Sandeen 847943 784191 - Revert: fs nfsd: rename int access to int mayflags in nfsdopen Eric Sandeen...
1
kernel 2.6.18-308.16.1.0.1.el5 - kernel Initialize the local uninitialized variable stats. orabug 14051367 - fs JBD:make jbd support 512B blocks correctly for ocfs2. orabug 13477763 - x86 fix fpu context corrupt when preempt in signal context orabug 14038272 - net bonding: fix carrier detect when...
Unbreakable Enterprise kernel Security update
2.6.39-200.32.1 - dl2k: Clean up rioioctl Stephan Mueller Orabug: 14680245 CVE-2012-2313 - hugetlb: fix resvmap leak in error path Christoph Lameter Orabug: 14680284 CVE-2012-2390 - rds: set correct msgnamelen Jay Fenlason Orabug: 14680018 CVE-2012-3430...
Unbreakable Enterprise kernel security update
2.6.32-300.32.3 - dl2k: Clean up rioioctl Stephan Mueller Orabug: 14675306 CVE-2012-2313 - hugetlb: fix resvmap leak in error path Christoph Lameter Orabug: 14676403 CVE-2012-2390 - rds: set correct msgnamelen Jay Fenlason Orabug: 14676504 CVE-2012-3430...
kernel security and bug fix update
2.6.32-279.9.1.el6 - md raid1, raid10: avoid deadlock during resync/recovery. Dave Wysochanski 845464 835613 - fs dlm: fix deadlock between dlmsend and dlmcontrold David Teigland 849051 824964 - ata libata: Add space to fix 2GB ATA Flash Disk/ADMA428M blacklist Prarit Bhargava 851445 843849 - fs...
qpid security, bug fix, and enhancement update
python-qpid 0.14-11 - BZs: 825078 - Resolves: rhbz840053 qpid-cpp 0.14-22.0.1.el63 - Update summary and description in specfile to be product neutral 0.14-22 - BZs: 609685, 849654, 854004 0.14-21 - BZs: 831365, 840982, 844618 0.14-20 - BZs: 683711, 689408, 825078, 834608, 841196, 841488 0.14-19 -...
libxml2 security update
2.7.6-8.0.1.el63.3 - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball 2.7.6-8.el63.3 - Change the XPath code to percolate allocation error CVE-2011-1944 2.7.6-8.el63.2 - Fix an off by one pointer access CVE-2011-3102 2.7.6-8.el63.1 - Fix a failure...
openjpeg security update
1.3-9 - Apply patch for CVE-2012-3535 Resolves: CVE-2012-3535...
spice-gtk security update
0.11-11.el63.1 - Fix version for Z-stream Related: rhbz854823 0.11-12 - Add patch fixing CVE-2012-3524 Resolves: rhbz854823...
bind security and bug fix update
30:9.3.6-20.P1.4 - bind-chroot-admin: set correct permissions on /etc/named.conf during update 30:9.3.6-20.P1.3 - fix CVE-2012-4244...
bind security update
32:9.8.2-0.10.rc1.3 - fix CVE-2012-4244...
bind97 security update
32:9.7.0-10.P2.3 - fix CVE-2012-4244...
libxslt security update
1.1.26-2.0.2.el63.1 - Increment release to avoid ULN conflict with previous release. 1.1.26-2.0.1.el63.1 - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball 1.1.26-2.el63.1 - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870 - Fix direct patter...
postgresql and postgresql84 security update
8.4.13-1 - Update to PostgreSQL 8.4.13, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-13.html including the fixes for CVE-2012-3488, CVE-2012-3489 Resolves: 852020...
dbus security update
1:1.2.24-7.0.1.el63 - fix netlink poll: error 4 Zhenzhong Duan 1:1.2.24-7 - Resolves: 854821 1:1.2.24-6 - Apply patches for CVE-2011-2200 - Resolves: 725314...
postgresql security update
8.1.23-6 - Back-port upstream fix for CVE-2012-3488 Resolves: 852015...
quagga security update
0.99.15-7.2 - improve fix for CVE-2011-3325 0.99.15-7.1 - fix CVE-2011-3323 - fix CVE-2011-3324 - fix CVE-2011-3325 - fix CVE-2011-3326 - fix CVE-2011-3327 - fix CVE-2012-0255 - fix CVE-2012-0249 and CVE-2012-0250 - fix CVE-2012-1820 0.99.15-7 - Resolves: 684751 - CVE-2010-1674 CVE-2010-1675 quag...
quagga security update
0.98.6-7.1 - fix CVE-2011-3323 - fix CVE-2011-3324 - fix CVE-2011-3325 - fix CVE-2011-3326 - fix CVE-2011-3327 - fix CVE-2012-0249 - fix CVE-2010-1674 0.98.6-7 - Resolves: 638628 - CVE-2007-4826 CVE-2010-2948 quagga: various flaws 0.98.6-6 - Resolves: 528583 - Missing declarations cause zebra to...
libexif security update
0.6.21-5 - Update to version 0.6.21 fixing many bugs and CVEs - Remove upstreamed patches - Resolves: 839915...
ghostscript security update
8.70-14:.1 - Added inputChan lower-bounds checking to icclib bug 854227, CVE-2012-4405...
qemu-kvm security update
0.12.1.2-2.295.el63.2 - kvm-console-bounds-check-whenever-changing-the-cursor-du.patch bz851257 - Resolves: bz851257 EMBARGOED CVE-2012-3515 qemu/kvm: VT100 emulation vulnerability rhel-6.3.z...
xen security update
3.0.3-135.el58.5 - console: Prevent escape sequence length overflow rhbz 851253...
kvm security update
83-249.0.1.el58.5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch 83-249.el58.5 - kvm-console-bounds-check-whenever-changing-the-cursor-du-58.patch bz851255 - CVE: CVE-2012-3515 - Resolves: bz851255 EMBARGOED CVE-2012-3515 qemu/kvm: VT100...
java-1.6.0-openjdk security update
1.6.0.0-1.28.1.10.9.0.1.el58 - Add oracle-enterprise.patch 1:1.6.0.0-1.28.1.10.9 - Updated to latest IcedTea6 1.10.9 - Resolves: rhbz846709 - Resolves: rhbz853114 1:1.6.0.0-1.27.1.10.8 - Access gnome bridge jar is forced to have 644 permissions - Resolves: rhbz828749...
java-1.6.0-openjdk security update
1:1.6.0.0-1.49.1.11.4 - Updated to latest IedTea6 1.11.4 - Resolves: rhbz853345 1:1.6.0.0-1.48.1.11.3 - Access gnome bridge jar is forced to have 644 permissions - Resolves: rhbz828752 1:1.6.0.0-1.47.1.11.3 - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch: -...
java-1.7.0-openjdk security update
1.7.0.5-2.2.1.0.1.el63.3 - Modify DISTRONAME for Oracle 1.7.0.5-2.2.1.el6.3 - Removed patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch - Applied upstream patches for same issue: patch 1001 sec-webrevs-openjdk7-29aug2012-7162473.patch patch 1002...
firefox security update
firefox 10.0.7-1.0.1.el63 - Replace firefox-redhat-default-prefs.js with firefox-oracle-default-prefs.js 10.0.7-1 - Update to 10.0.7 ESR xulrunner 10.0.7-1.0.1.el63 - Replace xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js 10.0.7-1 - Update to 10.0.7 ESR 10.0.6-2 - Added...
thunderbird security update
10.0.7-1.0.1.el63 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 10.0.7-1 - Update to 10.0.7 ESR...
glibc security and bug fix update
2.5-81.el58.7 - Fix out of bounds array access in strto exposed by 847929 patch. 2.5-81.el58.6 - Fix integer overflow leading to buffer overflow in strto 847929 2.5-81.el58.5 - Do not use PTIEEEIP ptrace calls 839411 - Update ULPs 839411 - Fix various transcendentals in non-default rounding modes...
glibc security update
2.12-1.80.el63.5 - Fix integer overflow leading to buffer overflow in strto and related out of bounds array index 847931...
python-paste-script security update
1.7.3-5 - fix group permissions in serve.py Resolves: CVE-2012-0878...
tetex security update
3.0-33.15.el59.1 - more robust fix for CVE-2010-3702 773178 3.0-33.15 - apply patch for CVE-2010-3702,3704 773180 3.0-33.14 - fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552 CVE-2011-1553 CVE-2011-1554, texlive various flaws 773180...
libvirt security and bug fix update
libvirt-0.9.10-21.0.1.el63.4 - Replace docs/et.png in tarball with blank image libvirt-0.9.10-21.el63.4 - daemon: Fix crash in virTypedParameterArrayClear rhbz844735 - remote: Fix locking in stream APIs rhbz847946 - Using virOnce for global initialization is desirable rhbz847959 - json: Fix...
1
kernel 2.6.18-308.13.1.0.1.el5 - kernel Initialize the local uninitialized variable stats. orabug 14051367 - fs JBD:make jbd support 512B blocks correctly for ocfs2. orabug 13477763 - x86 fix fpu context corrupt when preempt in signal context orabug 14038272 - net bonding: fix carrier detect when...
kernel security and bug fix update
kernel 2.6.18-308.13.1.el5 - net e1000e: Cleanup logic in e1000checkforserdeslink82571 Dean Nelson 841370 771366 - net e1000e: Correct link check logic for 82571 serdes Dean Nelson 841370 771366 - mm NULL pointer dereference in vmenoughmemory Jerome Marchand 840077 836244 - fs dlm: fix slow rsb...
gimp security update
2:2.2.13-2.0.7.el58.5 - fix overflow in GIF loader CVE-2012-3481 2:2.2.13-2.0.7.el58.4 - fix overflows in PSD plugin CVE-2009-3909, CVE-2012-3402 - fix heap corruption and overflow in GIF plug-in CVE-2011-2896 - fix overflow in CEL plug-in CVE-2012-3403...
gimp security update
2:2.6.9-4.3 - fix overflow in GIF loader 847303 2:2.6.9-4.2 - fix overflows in GIF, CEL loaders 727800, 839020...
kernel security and bug fix update
2.6.32-279.5.1.el6 - net 8021q/vlan: filter device events on bonds Neil Horman 842429 841983 2.6.32-279.4.1.el6 - fs proc: stats: Use archidletime for idle and iowait times if available Steve Best 841579 841149 - drm i915: fix integer overflow in i915gemexecbuffer2 Jacob Tanenbaum 824553 824555...
openldap security and bug fix update
2.4.23-26.2 - CVE-2012-2668 825875 cipher suite selection by name can be ignored default cipher suite is always selected 2.4.23-26.1 - fix: smbk5pwd module computes invalid LM hashes 820278...
sudo security and bug fix update
1.7.2p1-14.2 - added a workaround for a race condition in handling child processes Resolves: rhbz844978 1.7.2p1-14.1 - dont remove the sudoers: line from nsswitch.conf on update - use safe temporary file for nsswitch.conf - call restorecon after modifying nsswitch.conf - fixed command escaping -...
bind security update
20:9.2.4-38.0.1.el4 - fix CVE-2012-1667 Adam Tkac orabz 14418...
bind-dyndb-ldap security update
1.1.0-0.9.b1.1 - fix CVE-2012-3429...
dhcp security update
12:4.1.1-31.P1.0.1.el63.1 - Added oracle-errwarn-message.patch 12:4.1.1-31.P1.1 - An error in the handling of malformed client identifiers can cause a denial-of-service condition in affected servers. CVE-2012-3571, 843120 - Memory Leaks Found In ISC DHCP CVE-2012-3954, 843120...
dhcp security update
12:3.0.5-31.1 - An error in the handling of malformed client identifiers can cause a denial-of-service condition in affected servers. CVE-2012-3571, 843124...
libreoffice security update
3.4.5.2-16.1.0.1.el63 - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' 3.4.5.2-16.1 - Resolves: rhbz839867 CVE-2012-2665...
krb5 security update
1.9-33.2 - pull up the patch to correct a possible NULL pointer dereference in kadmind CVE-2012-1013, 827517 1.9-33.1 - add candidate patch from upstream to fix freeing uninitialized pointer in the KDC MITKRB5-SA-2012-001, CVE-2012-1015, 839859...
icedtea-web security update
1.2.1-1 - Updated to 1.2.1 - Resolves: CVE-2012-3422 - Resolves: CVE-2012-3423...