Important: kdegraphics security update

3.3.1-4.RHEL4 - Resolves: bz248215, CVE-2007-3387 xpdf integer overflow...

Moderate: bind security update

9.2.4-27.0.1.el4 - fixed cryptographically weak query id generator CVE-2007-2926...

Critical: seamonkey security update

1.0.9-4.el4.0.1 - Add mozilla-oracle-default-bookmarks.html, mozilla-oracle-default-prefs.js, and mozilla-home-page.patch for errata build 1.0.9-4.el4 - Remove broken patch for Mozilla bug 199088 1.0.9-3.el4 - Update to latest snapshot of Mozilla 1.8.0 branch - Include patches for Mozilla bugs...

Moderate: thunderbird security update

1.5.0.12-0.3.el4.0.1 - Add thunderbird-oracle-default-prefs.js for errata rebuild 1.5.0.12-0.3.el4 - Add a patch to stick with major versions 1.5.0.12 / 1.8.0.12 1.5.0.12-0.2.el4 - Update to latest snapshot of Mozilla 1.8.0 branch - Include patches for Mozilla bugs 379245, 384925, 178993, 381300...

Critical: firefox security update

1.5.0.12-0.3.el4.0.1 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js for errata rebuild 1.5.0.12-0.3.el4 - Add a patch to stick with major versions 1.5.0.12 / 1.8.0.12 1.5.0.12-0.2.el4 - Update to latest snapshot of Mozilla 1.8.0 branch - Include patches for Mozill...

Moderate: tomcat security update

5.5.23-0jpp.1.0.4.el5 - Remove erroneous rebuild-gcj-db for javadoc subpackage - Add fixes for CVE-2007-2449 and CVE-2007-2450 - resolves: bug 244846, bug 244816...

Moderate: httpd security update

2.0.52-32.3.ent.0.1 - merge Oracle modifications 2.0.52-32.3.ent - add security fix for CVE-2007-3304 246181...

Moderate: perl-Net-DNS security update

0.31-4.el3 - Resolves: rhbz245616 - Backport patch to fix dnexpand looping issue - Backport patch to randomize ID field - Also allow disabling of online tests...

Moderate: xorg-x11-xfs security update

1.0.2-4 - Fix root priv elevation bug 242903. Just don't delete the directory and make sure when we create the directory, that we set the mode using mkdir -m...

Moderate: perl-Net-DNS security update

0.48-2 - Resolves: rhbz245618 - Backport patch to fix dnexpand looping issue - Backport patch to randomize ID field...

Moderate: xorg-x11 security update

6.8.2-1.EL.19.0.1 - Add Enterprise Linux detection 6.8.2-1.EL.19 - Fix root priv elevation bug 242903. Just don't delete the directory and make sure when we create the directory, that we set the mode using mkdir -m...

Moderate: kernel security and bug fix update

2.6.18-8.1.8.0.1.el5 -Fix bonding primary=ethX Bert Barbe IT 101532 ORA 5136660 -Add entropy module option to e1000 John Sobecki ORA 6045759 -Add entropy module option to bnx2 John Sobecki ORA 6045759 2.6.18-8.1.8.el5 - ppc64 Fix FP corruption in signal return path Konrad Rzeszutek 245580...

Important: cman security update

2.0.64-1.0.1 - Fixes potential buffer overflow in cman - Resolves: rhbz244891...

Critical: krb5 security update

1.2.7-66 - add patch to fix buffer overflow in kadmind 239073, CVE-2007-2798 1.2.7-65 - add patch to fix buffer overflow and double-free in rpc library 239073, CVE-2007-2442/CVE-2007-2443...

Critical: HelixPlayer security update

1.0.6-0.EL4.2.0.2 - Rebuild for z-stream bz245842 1.0.6-0.EL4.2 - Add a fix for CVE-2007-3410...

Moderate: httpd security update

2.0.46-67.ent.0.1 - index.html cleanup and logo removal 2.0.46-67.ent - rebuild 2.0.46-66.ent - modcache: follow upstream max-stale handling in CVE-2007-1863 fix 244662 2.0.46-65.ent - add security fixes for CVE-2007-1863 and CVE-2006-5752 244662 2.0.46-64.ent - fix ProxyErrorOverride to only...

Important: gnupg security update

1.4.5-13 - incorporate patch from Werner to work around clients which can't tell that multiple plain messages have been processed 230457...

Important: krb5 security update

1.3.4-49 - add patch to fix buffer overflow in kadmind 239073, CVE-2007-2798 1.3.4-48 - add patch to fix buffer overflow and double-free in rpc library 239073, CVE-2007-2442/CVE-2007-2443...

Important: kernel security update

2.6.9-55.0.2.0.1 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix for nfs open call taking longer issue Chuck Lever orabug 5580407 bz 219412 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach...

Important: xen security update

3.0.3-25.0.3.el5 - fix ethernet bonding in balanced-rr mode, respin rhbz215887 3.0.3-25.0.2.el5 - fix ethernet bonding in balanced-rr mode rhbz215887 3.0.3-25.0.1.el5 - disable qemu monitor mode, for security reasons rhbz230295 - fix IA64 shadow page table mode rhbz230459, rhbz230331...

Moderate: evolution-data-server security update

1.8.0-15.0.3.el5 - Add patch for RH bug 235289 APOP authentication vulnerability. 1.8.0-15.0.2.el5 - Remove Makefile.in changes that accidentally slipped into the patch. 1.8.0-15.0.1.el5 - Add patch for RH bug 229707 timezone updates...

Important: kernel security and bug fix update

2.6.18-8.1.6.0.1.el5 -Fix bonding primary=ethX so it picks correct network Bert Barbe IT 101532 ORA 5136660 -Add entropy module option to e1000 John Sobecki ORA 6045759 -Add entropy module option to bnx2 John Sobecki ORA 6045759 2.6.18.8-1.6.el5 - bluetooth close information leaks in setsockopt...

Important: evolution-data-server security update

1.8.0-15.0.4.el5 - Add patch for RH bug 244293 Camel IMAP security flaw...

Moderate: vim security update

7.0.109-3.3 - use gzip -9n to avoid multilib fileconflicts 7.0.109-3.2 - Let 'modeline' default to off for root - Resolves: bz238259 7.0.109-3.1 - fix modeline issues - Resolves: bz238259...

Important: libXfont security update

1.2.2-1.0.2.el5 - Rebuild because of forgotten changelog entry. 1.2.2-1.0.1.el5 - Fix for bug 234058, cve-2207-1351/1352...

Moderate: iscsi-initiator-utils security update

6.2.0.742-0.6 - BZ 243726 fix two security flaws in open-iscsi iscsid and logging...

Important: tomcat security update

jakarta-commons-modeler-1.1-8jpp.1.0.2.el5 1.1-8jpp.1.0.2.el5 - rebuild after the fix for bug 238139 made it into the build root - Resolves: bug 238694 1.1-8jpp.1.0.1.el5 - Add patch to fix jira task: MODELER-15 to allow tomcat5 5.5.23 to build against j-c-modeler - Resolves: bug 238694...

Moderate: httpd security update

2.0.52-32.2.ent.0.1 - merge Oracle modifications 2.0.52-32.2.ent - add security fixes for CVE-2007-1863 and CVE-2006-5752 244663...

Moderate: httpd security update

2.2.3-7.el5.0.1 - Marks removal + index page cleanup 2.2.3-7.el5 - add security fixes for CVE-2007-1863, CVE-2007-3304, and CVE-2006-5752 244665...

Moderate: ipsec-tools security update

0.6.5-8 - Upstream fix for Racoon DOS, informational delete must be encrypted - Resolves: rhbz235388 - CVE-2007-1841 ipsec-tools racoon DoS 0.6.5-7 - Resolves: 218386 labeled ipsec does not work over loopback 0.6.5-6.6 - Related: 232508 add auditing to racoon 0.6.5-6.5 - Resolves: 235680 racoon...

Important: php security update

5.1.6-12.el5 - add security fix for CVE-2007-1864, SOAP redirect handling issue, FTP CRLF injection issue 235016 5.1.6-11.el5 - add security fix for CVE-2007-1718 235016 5.1.6-9.el5 - add security fix for CVE-2007-1583 235016 - add security fixes for CVE-2007-0455, CVE-2007-1001 235036 5.1.6-7.el...

Important: xorg-x11-server security update

1.1.1-48.13.0.1.el5.0.1 - add Enterprise Linux detection 1.1.1-48.13.0.1.el5 - cve-2007-1003.patch. xc misc overflows 233001...

Moderate: squid security update

2.6.STABLE6-4 - Resolves: rhbz233253 - CVE-2007-1560 Squid TRACE DoS...

Important: kernel security and bug fix update

2.6.18-8.1.4.0.1.el5 -Fix bonding primary=ethX so it picks correct network Bert Barbe IT 101532 ORA 5136660 -Add entropy module option to e1000 John Sobecki ORA 6045759 -Add entropy module option to bnx2 John Sobecki ORA 6045759 2.6.18.8.1.4.el5 - ipv6 Fix routing regression. David S. Miller 2380...

Moderate: xorg-x11-apps/libX11 security updates

libX11-1.0.3-8.0.1.el5 1.0.3-8.0.1.el5 - Add int-overflow.patch 231694 xorg-x11-apps-7.1-4.0.1.el5 7.1-4.0.1.el5 - Add int-overflow.patch bug 231694...

Moderate: bind security update

30:9.3.3-8 - added fix for 224445 - CVE-2007-0493 BIND might crash after attempting to read free-ed memory - added fix for 225229 - CVE-2007-0494 BIND dnssec denial of service - Resolves: rhbz224445 - Resolves: rhbz225229...

Important: evolution security update

2.0.2-35.0.4.el4 - Bump seamonkeybuildversion to 1.0.9. 2.0.2-35.0.3.el4 - Add patch for RH bug 244291 Camel IMAP security flaw...

Moderate: gcc security and bug fix update

3.2.3-59 - fix directory traversal bug in fastjar Richard Guenther, 225552, CVE-2006-3619 - fix a reload bug with -fnon-call-exceptions Alexandre Oliva, 226706...

Low: shadow-utils security and bug fix update

2:4.0.3-29.RHEL3 - add missing build requires 2:4.0.3-28.RHEL3 - fix mailbox creation race condition 193053 2:4.0.3-27.RHEL3 - chage gives correct information 216635 - do not strip binaries 176949...

Low: gdb security and bug fix update

6.3.0.0-1.138 - Fixed crash on cross-file resolving of opaque types BZ 135488. - 6.3.0.0-1.137 - Never lose any pending signal while attaching - resubmit them BZ 189607. - 6.3.0.0-1.136 - Bugfix segv on the source display by ^X 1 BZ 202345. - Support shared libraries 2GB on 64bit hosts - obstack...

Moderate: pam security and bug fix update

cdrtools-2.01.0.a32-0.EL3.6 2.01.0.a32-0.EL3.6 - fix for CVE-2004-0813 - cdrecord and readcd are now suid, but with a pamconsole check - Resolves: rhbz232096 2.01.0.a32-0.EL3.3 - fix for CAN-2005-0866 "cdrecord insecure temporary file" 2.01.0.a32-0.EL3.2 - added patch for CAN-2004-0806, if s.o. w...

Low: openldap security and bug-fix update

2.0.27-23 - Include the -ppc64 patch to fix a ppc64-specific build failure. - Put back smpmflags...

Important: kernel security update

kernel-2.4.21-50.EL - improve IGMP join processing during bonding failover Andy Gospodarek - fix EHCI period handling for high-speed USB HID devices Pete Zaitcev kernel-2.4.21-49.EL - fix dput crash regression caused in -47.5.EL Eric Sandeen - add ifcfg-bond0 documentation in bonding.txt Andy...

Low: mod_perl security update

1.9916-4.5 - avoid backup files in install root 241643 1.9916-4.3 - fix XS generation of methodislimited 242430 1.9916-4.2 - rebuild 1.9916-4.1 - add security fix for CVE-2007-1349 241643...

Moderate: libexif security update: integer overflow

Add patch for CVE-2007-4168. Fix bug 243893 - Fix bug 240055...

Moderate: spamassassin security update

3.1.9-1 - 3.1.9 CVE-2007-2873...

Important: kdebase security update

6:3.3.1-5.19.rhel4.0.1 - turn off ' - 6:3.3.1-5.19.rhel4 - Resolves: bz243620, KDE flash player workaround, CVE-2007-2022...

Important: openoffice.org security update

1.1.5-10.0.1 - Resolves: rhbz242007 CVE-2007-0245 rtf prtdata fix...

Moderate: freetype security update

2.1.9-6.el4 - Add freetype-2.1.9-ttf-overflow.patch - Resolves: 240574...

Moderate: fetchmail security update

6.2.5-6.0.1.el4 - Fix APOP vulnerability CVE-2007-1558 Resolves: 241197...