sblim security update

1.31.0.1.el52.1 - Add oracle-enterprise-release.patch 1.31.el52.1 - Remove RPATH from shared libraries in sblim-cmpi-dns,fsvol,network, nfsv3,nfsv4,samba,syslog and create appropriate record in /etc/ld.so.conf.d CVE-2008-1951 Resolves: 446859...

bash bug fix update

2.05b-41.7.0.2 - Removed the dependency on libncurses.so...

freetype security update

2.2.1-20 - Add freetype-2.3.5-CVEs.patch - Resolves: 450910...

openoffice.org security update

1.1.5-10.0.5 - Resolves: rhbz450521 CVE-2008-2366 1.1.5-10.0.4 - Resolves: rhbz450521 CVE-2008-2152...

xorg-x11-server security update

1.1.1-48.41.0.1.el52.1 - Added Enterprise Linux detection 1.1.1-48.41.1 - cve-2008-1377.patch: Record and Security Extension Input validation - cve-2008-1379.patch: MIT-SHM extension Input Validation flaw - cve-2008-2360.patch: Render AllocateGlyph extension Integer overflows - cve-2008-2361.patc...

XFree86 security update

4.3.0-128.0.1.EL - Add oracle detection to Imake. 4.3.0-128.EL - cve-2008-2360.patch: Render AllocateGlyph extension Integer overflows - fix 4.3.0-127.EL - cve-2008-1377.patch: Record and Security Extension Input validation - cve-2008-1379.patch: MIT-SHM extension Input Validation flaw -...

perl security update

5.8.8-10.0.1.el52.3 - Added patch perl-5.8.8-OEL-mock-build.patch to disable lib/Net/t/hostname.t so that build complete successfully in mock env. 5.8.8-10.el5.3 - CVE-2008-1927 perl: double free on regular expressions with utf8 characters - Resolves: 449323...

xorg-x11 security update

6.8.2-1.0.1.EL.33.0.4 - Add Enterprise Linux detection - Add XFree86-4.3.0-oracle-bug-report-address-update.patch 6.8.2-1.EL.33.0.4 - cve-2008-2360.patch: Render AllocateGlyph extension Integer overflows - fix 6.8.2-1.EL.33.0.3 - cve-2008-1377.patch: Record and Security Extension Input validation...

net-snmp security update

5.3.1-24.1 - fix buffer overflow in perl module CVE-2008-2292 449897 - fix SNMPv3 authentication checks unknown CVE 449897...

cups security update

1.2.4-11.18:.1 - Applied patch to fix CVE-2008-1722 integer overflow in image filter, bug 441692, STR 2790...

evolution security update

2.0.2-35.0.4.el4.2 - Add patch for RH bug 448724 buffer overflow vulnerability...

evolution security update

2.0.2-35.0.4.el4.2 - Add patch for RH bug 448725 buffer overflow vulnerability...

evolution28 security update

2.8.0-53.0.1.el46.3 - Comment evolution-2.8.0-red-hat-branding.patch to make evolution as vendor neutral 2.8.0-53.el46.3 - Add patches for RH bug 448721 buffer overflow vulnerabilities...

samba security and bug fix update

3.0.28-1.el52.1 - Security fix for CVE-2008-1105 - Fix join verification - Fix smb signing - resolves: CVE-2008-1105 - resolves: 447380 - resolves: 444637...

mysql security and bug fix update

5.0.45-7 - Adjust thread stack requests to allow for platform-specific guard page size; necessary to prevent stack overrun on PPC with RHEL5's 64K page size. Resolves: 435391 - Remove calendar-dependent queries from 'view' test; necessary to get regression tests to pass after 2007. 5.0.45-6 -...

gnome-screensaver security update

2.16.1-8 Resolves: 436522 - rebuild against 5.1 nss 2.16.1-7 Resolves: 436522 - dont unlock the screen when pwent lookup fails 2.16.1-6 Resolves: 245345 - Add missing BuildRequires to fix fade in...

bind security, bug fix, and enhancement update

30:9.3.4-6.P1 - final 5.2 version - minor changes in initscript - improved patches for 250744 and 250901 30:9.3.4-5.P1 - improved patch to handle D-BUS races 240876 - updated named.root zone to affect root IPv6 migration 30:9.3.4-4.P1 - improved fix for 253537, posttrans script is now used - do n...

vsftpd security and bug fix update

2.0.5-12 - fix CVE-2007-5962: vsftpd memory leak when denyfile option is set - Resolves: 423001 2.0.5-11 - add new option to log login failures based on user list - Resolves: 345791 - fix userconfigdir option - Resolves: 400921 - allow usernames starting with '' or '.' - Resolves: 386561 - fix th...

setroubleshoot security and bug fix update

setroubleshoot: 2.0.5-3.0.1.el5 - replace missed references to bugzilla.redhat.com with linux.oracle.com 2.0.5-3 - Resolve: bug 436564: socket.getsockopt on ppc generates exception Fix typo in original setroubleshoot-getcredentials.patch 2.0.5-2 - Resolve: bug 437857: python error in system...

nss_ldap security and bug fix update

253-12 - rebuild 253-11 - backport changes to group parsing from version 254 to fix heap corruption when parsing nested groups 444031 253-10 - remove unnecessary nssldap linkage to libnsl part of 427370 253-9 - rebuild 253-8 - incorporate Tomas Janouseks fix to prevent re-use of connections acros...

dovecot security and bug fix update

1.0.7-2 - LDAP+auth cache user login mixup CVE-2007-6598, 427575 - insecure mailextragroups option CVE-2008-1199, 436927 1.0.7-1 - update to latest upstream, fixes a few bugs 331441, 245249, plus two security vulnerabilities CVE-2007-2231, CVE-2007-4211 - increased default loginprocesssize to 64...

samba security update

3.0.10-2.el45.3 - Security fix for CVE-2008-1105 resolves: CVE-2008-1105...

samba security update

3.0.25b-6.el46.5 - Security fix for CVE-2008-1105 - resolves: CVE-2008-1105...

libxslt security update

1.1.17-2.0.1.el51.1 - Added libxslt-enterprise.patch and replaced doc/redhat.gif 1.1.17-2.el51.1 - fix a max number of steps in pattern match expressions bug - resolves: rhbz446891...

gnutls security update

1.0.20-4 - fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 447461, 447462, 447463...

gnutls security update

1.4.1-3 - fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 447461, 447462, 447463...

kernel security and bug fix update

2.6.18-53.1.21.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 6219364 - MM Fix allocpagesnode static 'nid' race made kernel crash Joe Jin ORA 6187457 - splice Fix bad unlockpage in error case Jens Axboe ORA 626357...

libvorbis security update

1.1.2-3.el5.2 - fix release tag Related: 444707 1.1.2-3.el5.1 - fix CVE-2008-1420, CVE-2008-1419, CVE-2008-1423 Resolves: 444707...

xen security and bug fix update

3.0.3-41.el51.5 - Disable QEMU image format auto-detection CVE-2008-2004 rhbz 444700 3.0.3-41.el51.4 - Fix PVFB to validate frame buffer description rhbz 443376 - Fix PVFB to cope with bogus update requests rhbz 368931 3.0.3-41.el51.3 - Fix QEMU buffer overflow CVE-2007-5730 rhbz 360381 - Fix QEM...

gpdf security update

2.8.2-7.7.2 - Add patch for CVE-2008-1693 444148...

kernel security and bug fix update

2.6.18-53.1.19.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 6219364 - MM Fix allocpagesnode static nid' race made kernel crash Joe Jin ORA 6187457 - splice Fix bad unlockpage in error case Jens Axboe ORA 6263574...

kernel security and bug fix update

2.6.9-67.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

kernel security and bug fix update

kernel-2.4.21-57.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - ora 5088963: io to nfs partition hangs - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli kernel-2.4.21-57.EL -...

thunderbird security update

1.5.0.12-11.el4.0.1 - Add thunderbird-oracle-default-prefs.js for errata rebuild 1.5.0.12-11 - Update patchset to fix regression as per 1.8.1.14...

openoffice.org security update

1.1.5-10.0.3 - rhbz435685 CVE-2007-5746, CVE-2008-0320 Various flaws...

xpdf security update

3.00-16.el4 - Resolves: 442388, CVE-2008-1693...

seamonkey security update

1.0.9-16.el4.0.1 - Added mozilla-oracle-default-prefs.js mozilla-oracle-default-bookmarks.html and mozilla-home-page.patch 1.0.9-16.el4 - Update patchset to fix regression as per 1.8.1.14...

firefox security update

1.5.0.12-15.el51.0.1 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js 1.5.0.12-15 - Update patchset to fix regressions as per 1.8.1.14...

poppler security update

0.5.4-4.4 - Add CVE-2008-1693.patch 442392...

kdegraphics security update

3.3.1-9 - Resolves: 442390, CVE-2008-1693...

ImageMagick security update

6.2.8.0-4.el51.1 - backport functionality for CVE patches - Add patch for CVE-2007-1797 235071 - Add patch for CVE-2007-4988 310081 - Add patch for CVE-2007-4985 310091 - Add patch for CVE-2007-4986 310121 - Add patch for CVE-2008-1096 286411 - Add patch for CVE-2008-1097 285861...

speex security update

1.0.5-4.el51.1 - Check for headers with invalid mode numbers 442037, CVE-2008-1686...

squid security update

2.6.STABLE6-5.el51.3 - fix for 439801 - regression introduced in fix for CVE-2007-6239 - Resolves: 439992...

thunderbird security update

1.5.0.12-10.el4.0.1 - Add thunderbird-oracle-default-prefs.js for errata rebuild 1.5.0.12-10 - Regression fixes 1.5.0.12-9 - Update to latest snapshot of Mozilla 1.8.0 branch - Add patches for backported fixes from 1.8.1.13...

gnome-screensaver security update

2.16.1-5.1 Resolves: 436521 - don't unlock the screen when pwent lookup fails...

cups security update

cups 1.1.22-0.rc1.9.20.2:.6 - Applied patch to fix CVE-2008-0053 HP-GL/2 input processing, bug 438117. - Applied patch to fix CVE-2008-1373 GIF overflow, bug 438303. - Applied patch to fix CVE-2008-1374 64-bit PDF crash, bug 438336...

cups security update

cups 1.2.4-11.14:.6 - Applied patch to fix CVE-2008-0053 HP-GL/2 input processing, bug 438117. - Applied patch to fix CVE-2008-1373 GIF overflow, bug 438303. 1.2.4-11.14:.5 - Applied patch to prevent heap-based buffer overflow in CUPS helper program bug 436153, CVE-2008-0047, STR 2729...

seamonkey security update

1.0.9-15.el4.0.1 - Add mozilla-oracle-default-bookmarks.html, mozilla-oracle-default-prefs.js, and mozilla-home-page.patch with Oracle default URLs 1.0.9-15.el4 - Fix SMTP regression 1.0.9-14.el4 - Don't deny for native wrappers in an XBL Binding 1.0.9-13.el4 - Fix assertions in script 1.0.9-12.e...

firefox security update

1.5.0.12-14.0.1 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js 1.5.0.12-14 - Fix assertions from script 1.5.0.12-13 - Ensure wrappers are properly disposed of 1.5.0.12-12 - Update to latest snapshot of Mozilla 1.8.0 branch - Add patches for backported fixes from...

Moderate: unzip security update

5.50-36.EL3 - Resolves: 436531 free called for uninitialized or already freed pointer...