Moderate: tomcat security update

5.5.23-0jpp.3.0.2 - Patch for CVE-2007-3382 and CVE-2007-3385 Resolves: rhbz254155 5.5.23-0jpp.3.0.1 - Patch for CVE-2007-3386 Resolves: rhbz254155...

Moderate: php security update

5.1.6-15.el5 - improve fix for CVE-2007-3997 278411 5.1.6-14.el5 - fix backport for CVE-2007-3996 278411 5.1.6-13.el5 - add security fixes for CVE-2007-2756, CVE-2007-2872, CVE-2007-3799, CVE-2007-3996, CVE-2007-3998, CVE-2007-4658, CVE-2007-4670 278411...

Important: nfs-utils-lib security update

1.0.6-8.z1 - Fixed RPC library buffer overflow bz 265001...

Moderate: xorg-x11 security update

6.8.2-1.EL.31.0.1 - Add Enterprise Linux detection 6.8.2-1.EL.31 - Rebuild due to missing patch 6.8.2-1.EL.30 - Add patch9832 -p1 -b .cve-2007-4730 286081...

Important:libvorbis security update

1.0-8.el3 - Add 16 patches to fix various CVEs. - Resolves: 245995...

Important: openoffice.org security update

1.1.5-10.0.2 - Resolves: rhbz251972 CVE-2007-2834 TIFF parsing heap overflow...

Important: kernel security update

2.6.18-8.1.10.0.1.el5 - Fix bonding primary=ethX Bert Barbe IT 101532 ORA 5136660 - Add entropy module option to e1000/bnx2 John Sobecki ORA 6045759 2.6.18-8.1.10.el5 - mm Prevent the stack growth into hugetlb reserved regions Konrad Rzeszutek 253313 CVE-2007-3739 2.6.18-8.1.9.el5 - misc cpuset...

Important: qt security update

3.3.6-23 - Resolves: 277011, Qt UTF8 improper character expansion, CVE-2007-0242 - Resolves: 269141, Qt off by one buffer overflow, CVE-2007-413...

Important: krb5 security update

1.5-29 - update to revised patch for CVE-2007-3999...

Moderate: kernel security and bugfix update

2.6.9-55.0.6.0.1 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix for nfs open call taking longer issue Chuck Lever orabug 5580407 bz 219412 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach...

Moderate: aide security update

0.13.1-2.0.4 - Added the correct new config file Related: rhbz252331 0.13.1-2.0.3 - Fixed file permissions to please release criteria Related: rhbz252331 0.13.1-2.0.2 - Removed saved copies of patched scripts Related: rhbz252331 0.13.1-2 - Fixed a typo Related: rhbz252331 0.13.1-1 - Rebased to...

Moderate: cyrus-sasl security update

2.1.15-15 - Changed spec file to include the mech patch all the time. - Added patch to prevent printing null realm - Applied existing mech for 1.5 to 2.1 Related: rhbz189814 2.1.15-14 - temporarily back out the fixes for 157012, 190113 2.1.15-13 - add unapplied patches which make the DIGEST-MD5...

Moderate: star security update

1.5a08-5 - fix directory traversal vulnerability CVE-2007-4134 - Resolves: rhbz254130...

Important: krb5 security update

1.5-28 - add preliminary patch to fix buffer overflow in rpcsecgss implementation in libgssrpc 250973, CVE-2007-3999 and write through uninitialized pointer in kadmind 250976, CVE-2007-4000...

Moderate: cyrus-sasl security and bug fix update

2.1.19-14 - Related: bz250732 Fixed a conflict with an earlier test patch 2.1.19-13 - Related: bz250732 Fixed uninitialized stack variable causing segfault 2.1.19-12 - Resolves: bz250732 sasl-sample-server crashes with null realm 2.1.19-11 - Resolves: bz243910 krb5-libs are not thread-safe -...

Important: mysql security update

4.1.20-2.RHEL4.1.0.1 - Fix CVE-2007-3780: remote DOS via bad password length byte Resolves: 257621 - Workaround for new gcc bug on ia64: it locks up while compiling sqltable.cc...

Moderate: tar security update

1.14-12.5.1.RHEL4 - CVE-2007-4131 tar directory traversal vulnerability 251921...

Moderate: kernel security and bugfix update

2.4.21-51.EL - properly initialized e1000 ESB2 NIC RX unit Andy Gospodarek - fix e1000: ESB2 register value causes an rlogin problem Vince Worthington - fix bluetooth setsockopt information leaks Don Howard - fix overflow in CAPI subsystem Don Howard...

Moderate: libgtop2 security update

2.8.0-1.0.2 - Update mapfix.patch to get rid of spurious newlines. Related: 249884 2.8.0-1.0.1 - Add mapfix.patch Resolves: 208265, 249884 async errata + 4.6...

Moderate: gdm security and bug fix update

2.16.0-31.0.1 - CVE-2007-3381 Resolves: 247659 2.16.0-31 - change 200d character to 200c character in ml.po...

Important: tetex security update

2.0.2-22.0.1.EL4.8 - backport upstream fix for xpdf integer overflow CVE-2007-3387 248207 Resolves: 248207...

Moderate: qt security update

3.3.3-11.RHEL4 - Resolves: bz248419, CVE-2007-3388 qt3 format string flaw...

Important: poppler security update

0.5.4-4.1 - Add patch to fix CVE-2007-3387 248212...

Important: kdegraphics security update

3.3.1-4.RHEL4 - Resolves: bz248215, CVE-2007-3387 xpdf integer overflow...

Important: gpdf security update

2.8.2-7.7 - Add patch to fix CVE-2007-3387 248204. 2.8.2-7.6 - Apply fix for CVE-2006-0301 bug 179053...

Important: cups security update

1.1.22-0.rc1.9.20.2 - Better patch for CVE-2007-3387 bug 248220. 1.1.22-0.rc1.9.20.1 - Applied patch to fix CVE-2007-3387 bug 248220...

Important: xpdf security update

3.00-12.RHEL4 - Resolves: bz248199, CVE-2007-3387 xpdf integer overflow...

Moderate: bind security update

9.2.4-27.0.1.el4 - fixed cryptographically weak query id generator CVE-2007-2926...

Critical: seamonkey security update

1.0.9-4.el4.0.1 - Add mozilla-oracle-default-bookmarks.html, mozilla-oracle-default-prefs.js, and mozilla-home-page.patch for errata build 1.0.9-4.el4 - Remove broken patch for Mozilla bug 199088 1.0.9-3.el4 - Update to latest snapshot of Mozilla 1.8.0 branch - Include patches for Mozilla bugs...

Moderate: thunderbird security update

1.5.0.12-0.3.el4.0.1 - Add thunderbird-oracle-default-prefs.js for errata rebuild 1.5.0.12-0.3.el4 - Add a patch to stick with major versions 1.5.0.12 / 1.8.0.12 1.5.0.12-0.2.el4 - Update to latest snapshot of Mozilla 1.8.0 branch - Include patches for Mozilla bugs 379245, 384925, 178993, 381300...

Critical: firefox security update

1.5.0.12-0.3.el4.0.1 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js for errata rebuild 1.5.0.12-0.3.el4 - Add a patch to stick with major versions 1.5.0.12 / 1.8.0.12 1.5.0.12-0.2.el4 - Update to latest snapshot of Mozilla 1.8.0 branch - Include patches for Mozill...

Moderate: tomcat security update

5.5.23-0jpp.1.0.4.el5 - Remove erroneous rebuild-gcj-db for javadoc subpackage - Add fixes for CVE-2007-2449 and CVE-2007-2450 - resolves: bug 244846, bug 244816...

Moderate: httpd security update

2.0.52-32.3.ent.0.1 - merge Oracle modifications 2.0.52-32.3.ent - add security fix for CVE-2007-3304 246181...

Moderate: xorg-x11-xfs security update

1.0.2-4 - Fix root priv elevation bug 242903. Just don't delete the directory and make sure when we create the directory, that we set the mode using mkdir -m...

Moderate: perl-Net-DNS security update

0.31-4.el3 - Resolves: rhbz245616 - Backport patch to fix dnexpand looping issue - Backport patch to randomize ID field - Also allow disabling of online tests...

Moderate: xorg-x11 security update

6.8.2-1.EL.19.0.1 - Add Enterprise Linux detection 6.8.2-1.EL.19 - Fix root priv elevation bug 242903. Just don't delete the directory and make sure when we create the directory, that we set the mode using mkdir -m...

Moderate: perl-Net-DNS security update

0.48-2 - Resolves: rhbz245618 - Backport patch to fix dnexpand looping issue - Backport patch to randomize ID field...

Moderate: kernel security and bug fix update

2.6.18-8.1.8.0.1.el5 -Fix bonding primary=ethX Bert Barbe IT 101532 ORA 5136660 -Add entropy module option to e1000 John Sobecki ORA 6045759 -Add entropy module option to bnx2 John Sobecki ORA 6045759 2.6.18-8.1.8.el5 - ppc64 Fix FP corruption in signal return path Konrad Rzeszutek 245580...

Important: cman security update

2.0.64-1.0.1 - Fixes potential buffer overflow in cman - Resolves: rhbz244891...

Critical: krb5 security update

1.2.7-66 - add patch to fix buffer overflow in kadmind 239073, CVE-2007-2798 1.2.7-65 - add patch to fix buffer overflow and double-free in rpc library 239073, CVE-2007-2442/CVE-2007-2443...

Critical: HelixPlayer security update

1.0.6-0.EL4.2.0.2 - Rebuild for z-stream bz245842 1.0.6-0.EL4.2 - Add a fix for CVE-2007-3410...

Moderate: httpd security update

2.0.46-67.ent.0.1 - index.html cleanup and logo removal 2.0.46-67.ent - rebuild 2.0.46-66.ent - modcache: follow upstream max-stale handling in CVE-2007-1863 fix 244662 2.0.46-65.ent - add security fixes for CVE-2007-1863 and CVE-2006-5752 244662 2.0.46-64.ent - fix ProxyErrorOverride to only...

Moderate: vim security update

7.0.109-3.3 - use gzip -9n to avoid multilib fileconflicts 7.0.109-3.2 - Let 'modeline' default to off for root - Resolves: bz238259 7.0.109-3.1 - fix modeline issues - Resolves: bz238259...

Moderate: httpd security update

2.0.52-32.2.ent.0.1 - merge Oracle modifications 2.0.52-32.2.ent - add security fixes for CVE-2007-1863 and CVE-2006-5752 244663...

Moderate: ipsec-tools security update

0.6.5-8 - Upstream fix for Racoon DOS, informational delete must be encrypted - Resolves: rhbz235388 - CVE-2007-1841 ipsec-tools racoon DoS 0.6.5-7 - Resolves: 218386 labeled ipsec does not work over loopback 0.6.5-6.6 - Related: 232508 add auditing to racoon 0.6.5-6.5 - Resolves: 235680 racoon...

Moderate: iscsi-initiator-utils security update

6.2.0.742-0.6 - BZ 243726 fix two security flaws in open-iscsi iscsid and logging...

Important: kernel security update

2.6.9-55.0.2.0.1 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix for nfs open call taking longer issue Chuck Lever orabug 5580407 bz 219412 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach...

Moderate: evolution-data-server security update

1.8.0-15.0.3.el5 - Add patch for RH bug 235289 APOP authentication vulnerability. 1.8.0-15.0.2.el5 - Remove Makefile.in changes that accidentally slipped into the patch. 1.8.0-15.0.1.el5 - Add patch for RH bug 229707 timezone updates...

Important: xorg-x11-server security update

1.1.1-48.13.0.1.el5.0.1 - add Enterprise Linux detection 1.1.1-48.13.0.1.el5 - cve-2007-1003.patch. xc misc overflows 233001...

Moderate: xorg-x11-apps/libX11 security updates

libX11-1.0.3-8.0.1.el5 1.0.3-8.0.1.el5 - Add int-overflow.patch 231694 xorg-x11-apps-7.1-4.0.1.el5 7.1-4.0.1.el5 - Add int-overflow.patch bug 231694...