Critical: samba security update

3.0.10-1.4E.12.2 - Security fixes for CVE-2007-2446 CVE-2007-2447...

Moderate: freeradius security update

1.0.1-3.RHEL4.5 - fixed CVE-2007-2028: EAP-TTLS denial of service Resolves: rhbz236247...

Important: php security update

4.3.9-3.22.5 - add security fix for CVE-2007-1864, FTP CRLF injection issue 239017...

Important: xscreensaver security update

4.18-5.rhel4.14.0.1 - modify xscreensaver-fortune-standin to use enterprise-release 4.18-5.rhel4.14 - check for null return value in getpwuid call CVE-2007-1859, Resolves: 237003...

Moderate: postgresql security update

7.4.17-1.RHEL4.1 - Update to PostgreSQL 7.4.17 for CVE-2007-2138, data loss bugs Resolves: 237680...

Moderate: cups security update

1.1.22-0.rc1.9.18 - REVERTED these changes: - Applied patch from STR 1301 bug 195354. - Patch pdftops to understand 'includeifexists', and use that in the pdftops.conf file bug 188583. - Clear the printer's statemessage and statereasons after successful job completion bug 187457. - Include...

Moderate: freetype security update

2.1.9-5 - Add freetype-2.2.1-bdf-overflow.patch - Resolves: 234228 2.1.9-4.el4 - assume any allocation over 32bits is an overflow, even on 64-bit platforms - remove memory debugging disabling patch 2.1.9-3.rhel4 - add null check to prevent crasher on one of the test files 2.1.9-3 - add patch from...

Important: php security update

4.3.9-3.22.4 - add security fixes for CVE-2007-1285, CVE-2007-1286, CVE-2007-1583, CVE-2007-1711, CVE-2007-1718 230556 - add security fixes for CVE-2007-0455, CVE-2007-1001 235028...

Moderate: mysql security update

4.1.20-2.RHEL4.1 - Back-port upstream patch for CVE-2006-4226 Resolves: 203426...

Important: XFree86 security update

4.3.0-120.EL.0.1 - Add oracle detection to Imake. 4.3.0-120.EL - add cve-2007-1351.patch 234056 4.3.0-119.EL - Add int-overflow.patch 231684 - comment out requirement on fonts-base as that is an unreleased change. 4.3.0-118.EL - Add cve-2007-1003.patch 232996 4.3.0-117.EL - Make xfs depend on...

Critical: krb5 security update

1.3.4-46 - fix bug ID in changelog 1.3.4-45 - add preliminary patch to fix buffer overflow in krb5kdc and kadmind 231528, CVE-2007-0957 - add preliminary patch to fix double-free in kadmind 231537, CVE-2007-1216 1.3.4-44 - temporarily disable bug fixes for 143289, 179062, 180671, 202191, 223669 f...

Important: xorg-x11 security update

6.8.2-1.EL.13.37.0.1 - Add Enterprise Linux detection 6.8.2-1.EL.13.37.7 - Add cve-2007-1351.patch 234056 6.8.2-1.EL.13.37.6 - Add cve-2007-1003.patch 233000 - Add int-overflow.patch 231693 6.8.2-1.EL.13.37.5 - Add xorg-x11-6.8.2-sorted-xkbcomp-dirs.patch to fix rpmdiff multilib failure...

Moderate: file security update

4.10-3.EL4.5 - Resolves: 233161: CVE-2007-1536: file 4.20 fixes a heap overflow in that can result in arbitrary code...

kdebase security fix

3.1.3-5.11.0.1 - add /etc/enterprise-release 3.1.3-5.11 - kdesktoplock should not stay running if grabInput failed 177755, CVE-2006-2933...

Important: openoffice.org security update

1.1.5-10 - Resolves: CVE-2007-0239 rhbz228008 shell escape 1.1.5-9 - Resolves: rhbz226966 CVE-2007-0238 buffer overflows 1.1.5-8 - Resolves: rhbz223801 CVE-2007-0002 buffer overflows...

kdegraphics security update

3.1.3-3.10 - Fix several vulnerabilities CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465 3.1.3-3.9 - Fix several vulnerabilities CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465...

libtiff security update

3.5.7-25.el3.4 - Fix several vulnerabilities CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465...

kernel security update

2.4.21-47.0.1.EL - fix buflen assignment for DVD BDA read requests Chip Coldwell - prevent write permission w/read-only shm segments Ernie Petrides - fix clock drift by disabling C1 clock ramping on AMD Prarit Bhargava - prevent possible deadlock with shmat/shm-rmid races Sachin Prabhu - prevent...

Important: XFree86 security update

4.3.0-115.EL.0.2 - Change Patch - needs to be -p0 not -p1 4.3.0-115.EL.0.1 - Add oracle detection to Imake. 4.3.0-115.EL - Add xorg-x11-6.8.2-sorted-xkbcomp-dirs.patch to fix rpmdiff multilib failure. 4.3.0-114.EL - Add xorg-x11-server-CVE-2006-6101.patch 218870 4.3.0-113.EL - Fix for CID font...

Low: wireshark security update

0.99.5-EL4.1.0.1 - Add patch oracle-ocfs2-network.patch 0.99.5-1 - multiple security issues fixed 225689 - CVE-2007-0459 - The TCP dissector could hang or crash while reassembling HTTP packets - CVE-2007-0459 - The HTTP dissector could crash. - CVE-2007-0457 - On some systems, the IEEE 802.11...

Important: gnupg security update

1.2.6-9 - incorporate backport of patch from Werner to work around clients which can't tell that multiple plain messages have been processed 230456...

Critical: thunderbird security update

1.5.0.10-0.1.el4.0.1 - defaults changed to oracle. 1.5.0.10-0.1.el4 - Update to 1.5.0.10 1.5.0.9-0.2.el4 - Fix langpack support to start in the user's locale where possible - Allow OpenOffice to send files as Thunderbird attachments...

Important: kernel security update

2.6.9-42.0.10.0.1 -Fix bonding primary=ethX so it picks correct network Bert Barbe IT 101532 ORA 5136660 2.6.9-42.0.10 -fix key serial number collision problem David Howells 227495 CVE-2007-0006 -fix audit panic on watched files Eric Paris 223129 CVE-2007-0001 2.6.9-42.0.9 -fix icmp oops in sctp...

Critical: Firefox security update

1.5.0.10-0.1.el4.0.1 - Replace default bookmarks and prefs 1.5.0.10-0.1.el4 - Update to 1.5.0.10 RC 1.5.0.9-0.2.el4 - Fix langpack support to start in the user's locale where possible...

Critical: seamonkey security update

seamonkey-1.0.8-0.1.el4.0.1: 1.0.8-0.1.el4.0.1 - Replace default bookmarks and prefs 1.0.8-0.1.el4 - Update to 1.0.8 RC 1.0.7-0.2.el4 - added fix for 204589: mozilla-config points to the wrong places devhelp-0.10-0.7.el4: 0.10-0.7.el4 - Rebuild against newer gecko...

Important: spamassassin security update

3.1.8-2 - Fix sa-learn regression 228968 3.1.8-1 - 3.1.8 CVE-2007-0451 3.1.7-9 - silence sa-update cron script 3.1.7-8 - only restart spamd if necessary after sa-update 227756 3.1.7-7 - requires gnupg 227738 3.1.7-6 - explicit requires on perlHTTP::Date and perlLWP::UserAgent Bug 193100 3.1.7-5 -...

Critical: gnomemeeting security update

1.0.2-9 - Fix for format string vulnerability bug 229266...

Important: php security update

4.3.9-3.22.3 - add security fix for CVE-2007-0988 4.3.9-3.22.2 - add security fixes for CVE-2007-0906, CVE-2007-0907, CVE-2007-0908, CVE-2007-0909, CVE-2007-0910 4.3.9-3.22.1 - update oci8 build from upstream Bastien Nocera, 162241 - add conditionally patch for lib64 oci8 build Xixi D'Moon, 17396...

Moderate: samba security update

3.0.10-1.4E.11 - Fix regression in smb.init found by rpmdiff Resolves: rhbz225513: CVE-2007-0452 Samba smbd denial of service 3.0.10-1.4E.10 - Include backported patch from upstream Resolves: rhbz225513: CVE-2007-0452 Samba smbd denial of service...

Moderate: ImageMagick security update

6.0.7.1-16.0.3 - update fix for CVS-2006-5456 6.0.7.1-16.0.2 - more security issues 217558, CVE-2006-5868; 192278, CVE-2006-2440 6.0.7.1-16.0.1 - fix more overflows 210921...

Moderate: dbus security update

0.22-12EL.8 - CVE-2006-6107: D-Bus denial of service - Resolves: 218055...

Moderate: postgresql security update

7.4.16-1.RHEL4.1 - Update to PostgreSQL 7.4.16 to fix CVE-2007-0555 Resolves: 225493...

Moderate: bind security update

20:9.2.4-24.EL4 - fixed a multilib regression 20:9.2.4-22.EL4 - added fix for 225222: CVE-2007-0494 BIND dnssec denial of service 20:9.2.4-20.EL4 - fix bug 203070: rndc.conf change breaks working bind config - fix bug 204288: postinstall scriptlet sets wrong permission 0655 20:9.2.4-18.EL4 - fix...

Moderate: squirrelmail security update

1.4.8-4.el4.1 - remove banners 1.4.8-4 - Clean up .orig files 223648 1.4.8-3 - CVE-2006-6142...

Moderate: fetchmail security update

6.2.5-6.el4.5 - Fix a KPOP support regression Related: 221985 223661 6.2.5-6.el4.4 - Fix V2,V3,V4 of CAN-2006-5867 Resolves: 221985 6.2.5-6.el4.3 - Fix CAN-2005-4348 176266 - Add BuildRequires: gettext-devel 164351 6.2.5-6.el4.1 - Fix CAN-2005-2335 163816, patch by Ludwig Nussel...

Important: kernel security update

2.6.0-42.0.8.0.1 -Fix bonding primary=ethX so it picks correct network IT 101532 ORA 5136660 2.6.0-42.0.8 -fix ext2 readdir fpos revalidation logic David Milburn 193877 2.6.9-42.0.7 -re-spin 2.6.9-42.0.6 -x8664: increase nmi watchdog timeout from 5 to 30 seconds Larry Woodman 205 722 2.6.9-42.0.5...

Moderate: gtk2 security update

2.4.13-22 - Fix a problem with the pixbuf loader closing patch 2.4.13-21 - Make update scripts handle slight variations in 2.4.13-20 - Fix error handling in pixbuf loaders 218932, CVE-2007-0010 -------------- next part -------------- An HTML attachment was scrubbed... URL:...

Moderate: libgsf security update

1.10.1-2 - Resolves: rhbz217949 CVE-2006-4514...

Important: xorg-x11 security update

6.8.2-1.EL.13.37.5.1 - Add oracle detection to Imake and xprint 6.8.2-1.EL.13.37.5 - Add xorg-x11-6.8.2-sorted-xkbcomp-dirs.patch to fix rpmdiff multilib failure. 6.8.2-1.EL.13.37.4 - Add xorg-x11-server-CVE-2006-6101.patch. 218871...

Important openoffice.org security update

1.1.5-6 - ensure correct permissions 1.1.5-5 - Resolves: rhbz217347 CVE-2006-5780 WMF heap overflow ooo70042 Known Issue: bz 2005: May get kde error message when exiting ooimpress and oodraw appears to be an existing problem See http://bugzilla.oracle.com for more details...

Moderate tar security update

1.14-12.RHEL4 - fix CVE-2006-6097 GNU tar directory traversal 216937 1.14-11.RHEL4 - fix verbose output 192770...

Critical firefox security update

1.5.0.9-0.1.el4.1 - Replace default bookmarks and prefs 1.5.0.9-0.1.el4 - Update to 1.5.0.9 RC - Update the pango patches to support mathml and various other fixes. - Let Firefox handle gcc warnings; it weeds out frequent offenders...

Critical thunderbird security update

1.5.0.9-0.1.el4.1 - Replace default bookmarks and prefs 1.5.0.9-0.1.el4 - Update to 1.5.0.9 RC - Update the pango patches to support mathml and various fixes. - Let Thunderbird handle gcc warnings; it weeds out frequent offenders...

Critical seamonkey security update

1.0.7-0.1.el4.1 - Replace default bookmarks and prefs 1.0.7-0.1.el4 - Update to 1.0.7 RC...

Low mod_auth_kerb security update

5.0-1.3.el4 - add fix for CVE-2006-5989 Nalin Dahyabhai, 216482...

Important gnupg security update

1.2.6-8 - incorporate patch from Werner to fix use of stack variable after it goes out of scope CVE-2006-6235, 218480 1.2.6-7 - add patch for overflow in openfile.c from Werner's mail CVE-2006-6169...

Moderate gnupg security update

1.2.6-6 - backport fixes for two more malloc overflows from 1.4.5rc1 200502...

Critical seamonkey security update

1.0.6-0.1.1.el4 - Replace bookmarks and prefs 1.0.6-0.1.el4 - Update to 1.0.6 RC 1.0.5-0.1.el4 - Update to 1.0.5...

Moderate wireshark security update

0.99.4-EL4.1.1 - Oracle OCFS2 network patch 0.99.4-1 - upgrade to 0.99.4, fixes multiple security issues 211993 - use dist tag - CVE-2006-5468 - The HTTP dissector could dereference a null pointer. - CVE-2006-5469 - The WBXML dissector could crash. - CVE-2006-5470 - The LDAP dissector and possibl...

Critical seamonkey security update

1.0.6-0.1.1.el4 - Replace bookmarks and prefs 1.0.6-0.1.el4 - Update to 1.0.6 RC 1.0.5-0.1.el4 - Update to 1.0.5...