dstat security update

0.6.6-3.1 - removed . and ./plugins from module loading path 538469...

xerces-j2 security update

0:2.7.1-7jpp.2.2 - Specifies target=1.3 for compilation Resolves: rhbz526017 0:2.7.1-7jpp.2.1 - Add patch for CVE-2009-2625 Resolves: rhbz526017...

bind security update

30:9.3.6-4.P1.1 - don't cache unvalidated additional sections 538744...

kdelibs security update

3.5.4-25.0.1.el54.1 - Remove Version branding - Maximum rpm trademark logos removed pics/crystalsvg/-mime-rpm in tarball 3.5.4-25.1 - bump release 3.5.4-22.2 - Resolves: 539716, CVE-2009-0689, kdelibs remote array overrun...

cups security update

1:1.3.7-11:.4 - Applied patch to fix CVE-2009-3553 bug 530111, STR 3200. - Applied patch to fix CVE-2009-2820 bug 529833, STR 3367, STR 3401...

java-1.6.0-openjdk security update

1:1.6.0.0.0-1.7.b09.0.1.el5 - Add oracle-enterprise.patch 1:1.6.0-1.7.b09 - Fixed applying patches 1:1.6.0-1.6.b09 - Updated Release 1:1.6.0-1.5.b09 - Fixed Makefile patch 1:1.6.0-1.4.b09 - Updated release tag 1:1.6.0-1.3.b09 - Updated release...

httpd security update

2.2.3-31.0.1.el54.2 - replace index.html with Oracle's index page oracleindex.html - update vstring and distro in specfile 2.2.3-31.2 - add security fixes for CVE-2009-3094, CVE-2009-3095, CVE-2009-3555 534041...

httpd security update

2.0.52-41.ent.6.0.1 - use oracle index page oracleindex.html - update vstring and distro in specfile 2.0.52-41.ent.6 - add security fixes for CVE-2009-3555, CVE-2009-1891, CVE-2009-3094, and CVE-2009-3095 534039...

4Suite security update

1.0-3.el48.1 - Fix an expat DoS CVE-2009-3720 Resolves: 532114...

libvorbis security update

1:1.1.2-3.el5.4 - fix CVE-CVE-2009-3379 Resolves: 532418...

kernel security and bug fix update

2.4.21-63.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-63.EL - fs: fix pipe nul...

wget security update

1.11.4-3 - add fix for CVE-2009-3490, incorrect verification of SSL certificate with NUL in name...

kernel security update

2.6.9-89.0.16.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

kernel security and bug fix update

2.6.18-164.6.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug 69930...

pidgin security update

1.5.1-6 - CVE-2009-3615 - CVE-2009-3083 - CVE-2009-2703...

pidgin security update

2.6.3-2 - Upstream backport: 3abad7606f4a2dfd1903df796f33924b12509a56 msnservconndisconnect-crash 2.6.3-1 - 2.6.3 CVE-2009-3615...

seamonkey security update

1.0.9-50.0.1.el48 - Added mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and removed corresponding RedHat ones 1.0.9-50.el4 - Added fixes from 1.9.0.15...

firefox security update

firefox: 3.0.15-3.0.1.el54 - Update firstrun and homepage URLs in specfile - Added patch oracle-firefox-branding.patch - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed the corresponding Red Hat ones 3.0.15-3 - Rebuild due to Mozilla's respin 3.0.15-2 -...

samba security update

3.0.33-3.15.el5 - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906 - resolves: 526660...

samba security and bug fix update

3.0.9-1.3E.16 - Security Release, fixes CVE-2009-2906 - resolves: 526657 3.0.9-X - Fix user facing cosmetic bug in patch for CVE-2007-2447 - resolves: 242754...

kernel security and bug fix update

2.6.9-89.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

cups security update

1:1.3.7-11:.3 - Include NULL pointer check in ObjectStream::getObject. Part of the fix for CVE-2009-3608 bug 526637. 1:1.3.7-11:.2 - Applied patch to fix CVE-2009-3608 bug 526637 and CVE-2009-3609 bug 526893...

poppler security and bug fix update

0.5.4-4.4.el54.11 - Fixes various flaws addressed in bugs 526637, 526893 and 526915 which were tracked in 527403. - Resolves: 527403 0.5.4-4.4.el54.10 - Add poppler-0.5.4-JBIG2-segment-reading.patch to fix reading of arithmetically encoded JBIG2 images with unknown length. - Resolves: 528147...

xpdf security update

3.00-22.1 - Resolves: 527468, CVE-2009-0791 3.00-22.el4 - CVE-2009-0791 3.00-21.el4 - CVE-2009-0791...

gpdf security update

2.8.2-7.7.2.el48.5 - Fixes various flaws addressed in bugs 491840 CVE-2009-0791, - Resolves: 527413...

kdegraphics security update

3.3.1-15.2 - Add missing NULL check to CVE-2009-3608 patch 3.3.1-15.1 - CVE-2009-0791...

xpdf security update

2.02-17.el3 - Resolves: 527470, CVE-2009-0791 2.02-16.el3 - Resolves: 527470, CVE-2009-0791 2.02-15.el3 - Resolves: 527470, CVE-2009-0791...

squirrelmail security update

1.4.8-5.0.1.el54.10 - Remove Redhat splash screen images 1.4.8-5.10 - fix: CVE-2009-2964 : CSRF issues in all forms - extend to all forms 1.4.8-5.9 - fix: CVE-2009-2964 : CSRF issues in all forms - add missing parts 1.4.8-5.8 - fix: CVE-2009-2964 : CSRF issues in all forms...

postgresql security update

7.3.21-2 - Fix CVE-2009-3230 back-ported upstream patch Resolves: 525322...

postgresql security update

8.1.18-2.el54.1 - Remove unnecessary .o file that confuses TPS tests Related: 525284 8.1.18-1.el54.1 - Update to PostgreSQL 8.1.18 to fix CVE-2009-0922, CVE-2009-3230, and assorted other bugs described at http://www.postgresql.org/docs/8.1/static/release.html Resolves: 525284...

xen security and bug fix update

3.0.3-94.el54.1 - Fix race condition on domain reboot rhbz 525143 - Avoid multiple restarts of a domain rhbz 525141 - Add grub.conf password protection support to pygrub rhbz 525142 - Ignore unimplemented PHYSDEVOPmappirq rhbz 525149...

elinks security update

0.11.1-6.1 - fix 235411 - CVE-2007-2027 - elinks tries to load .po files from non-absolute path - fix 523258 - CVE-2008-7224 - entitycache static array buffer overflow...

kvm security and bug fix update

83-105.0.1.el54.7 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.7 - kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch bz524557 - Resolves: bz524557 QEMU crash during virtio-net WHQL tests for Win2008 R2 kvm-83-105.el54.6 -...

openssh security update

4.3p2-36.2 - minimize chroot patch to be compatible with upstream 522141...

kernel security and bug fix update

2.6.18-164.2.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug 69930...

newt security update

0.52.2-12.el54.1 - fix buffer overflow in textbox when reflowing 524618, CVE-2009-2905...

cyrus-imapd security update

2.3.7-7.0.1.el54.3 - Enabled lmsensors-devel build dependency for x86 and x8664 only 2.3.7-7.3 - fix more buffer overflows in cyrus sieve CVE-2009-3235 2.3.7-7.2 - bump release for rebuild 2.3.7-7.1 - fix buffer overflow in cyrus sieve 521011...

neon security update

0.25.5-10.el54.1 - add security fixes for CVE-2009-2473 CVE-2009-2474 521788...

pidgin security update

2.6.2-2 - Upstream backports: 97e003ed2bc2bafbb993693c9ae9c6d667731cc1 aim-buddy-status-grab 37aa00d044431100d37466517568640cb082680c yahoo-buddy-idle-time 40005b889ee276fbcd0a4e886a68d8a8cce45698 yahoo-status-change-away cb46b045aa6e927a3814d9053c2b1c0f08d6fa62 crash-validate-jid 2.6.2-1.1 - VV...

freeradius security update

1.1.3-1.5 - Security: Fix Tunnel-Password zero-length attributes flaw bug 521912 Resolves: RH BZ522062 - rebase a couple of old patches freeradius-0.9.0-comerr.patch, freeradius-1.0.0-samba3.patch so they apply with fuzz=0...

kernel security and bug fix update

2.6.9-89.0.11.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidan...

firefox security update

firefox: 3.0.14-1.0.1.el54 - Update firstrun and homepage URLs in specfile - Added patch oracle-firefox-branding.patch - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed the corresponding Red Hat ones 3.0.14-1 - Update to 3.0.14 3.0.13-1 - Update to 3.0.13...

seamonkey security update

1.0.9-48.0.1.el48 - Added mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and removed corresponding Redhat ones 1.0.9-48.el4 - More 1.9.0.14 fixes 1.0.9-47.el4 - Added fixes from 1.9.0.14 1.0.9-46.el4 - Added fixes from 1.9.0.13...

fetchmail security update

6.3.6-1.1.el53.1 - Fix fetchmail various flaws CVE-2007-4565, CVE-2008-2711, CVE-2009-2666 Resolves: 516269...

xmlsec1 security update

1.2.9-8.1.1 - Fix a security issue on short hmac lenght CVE-2009-0217 - Resolves: rhbz516724...

seamonkey security update

1.0.9-0.45.0.1.el3 - Add mozilla-oracle-default-prefs.js, and mozilla-oracle-default-bookmarks.html and removed the corresponding RedHat ones. 1.0.9-0.45.el3 - More 1.9.0.14 fixes 1.0.9-0.44.el3 - Added fixes from 1.9.0.14 1.0.9-0.43.el3 - Removed rhbz513780 - Added fixes from 1.9.0.13...

nfs-utils security and bug fix update

1.0.9-42 - mountd: Check host alias with netgroups bz 478952 - exportfs: fixed typo in man page bz 474848 - nfs.init: NFS server reboot results in 'Stale NFS file handle' bz 474449 - nfslock.init: options not correctly parsed bz 459591 - mount.nfs: mounts fail with read-only /etc bz 450646 -...

lftp security and bug fix update

3.7.11-4 - Resolves: 461922 - lftp 'help mirror' does not display all options defined in manpage 3.7.11-3 - Resolves: 504594 - Alias ''edit' has multiple flaws 3.7.11-2 - Resolves: 504591 - Problems with spaces in file names over HTTP - Resolves: 504594 - Alias ''edit' has multiple flaws 3.7.11-1...

ecryptfs-utils security, bug fix, and enhancement update

75-4 - fix EOF handling 499367 - add icon to gui desktop file 75-3 - ask for password confirmation when creating openssl key 500850 - removed executable permission from ecryptfs-dot-private 500817 - ecryptfs-rewrite-file: improve of progress output 500813 - dont error out when unwrapping and addi...

openssl security, bug fix, and enhancement update

0.9.8e-12 - abort if selftests failed and random number generator is polled - mention EVPaes and EVPsha2xx routines in the manpages - add README.FIPS 0.9.8e-10 - fix CVE-2009-1386 CVE-2009-1387 DTLS DoS problems 503685, 503688 0.9.8e-9 - fix CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 DTLS DoS...