cups security update

1:1.3.7-8:.4 - Applied additional patches by Tim Waugh for batch3892.pdf, batch4781.pdf, batch5486.pdf, batch19856.pdf, batch19869.pdf testing files from CERT bug 491864. - Resolves: rhbz492386. 1:1.3.7-8:.3 - Applied patches to fix CVE-2009-0163 bug 490596, CVE-2009-0146 bug 490612, CVE-2009-014...

udev security update

095-14.20 - fix for CVE-2009-1185 bug 495051 - Resolves: rhbz495055...

kdegraphics security update

3.3.1-13.el4 - Resolves: 490727, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 revised patch that adds a fix for some potential problems, latest upstream patch 3.3.1-12.el4 - Resolves: 490727, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 revised patch that adds a fix for badpage10910.pdf 3.3.1-11.el4 -...

xpdf security update

3.00-20.el4 - Resolves: 490712, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 revised patch that adds a fix for some potential problems, latest upstream patch 3.00-19.el4 - Resolves: 490712, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 revised patch that adds a fix for badpage10910.pdf 3.00-18.el4 -...

cups security update

1:1.1.17-13.3.58 - Applied relevant part of patch to harden gmem interface bug 491864. 1:1.1.17-13.3.57 - Applied patch to fix CVE-2009-0163 bug 490596...

ghostscript security update

7.07-33.2:.8 - Added extra checking for CVE-2009-0792 bug 491853. 7.07-33.2:.7 - Applied patch to fix scfd buffer underrun bug 493442. - Applied patch to fix CVE-2009-0792 bug 491853...

ghostscript security update

8.15.2-9.4:.7 - Added extra checking for CVE-2009-0792 bug 491853. 8.15.2-9.4:.6 - Applied patch to fix gdevpdtb buffer overflow bug 493445. - Applied patch to fix scfd buffer underrun bug 493442. - Applied patch to fix CVE-2009-0792 bug 491853. - Applied patch to fix CVE-2009-0196 bug 493379...

krb5 security update

1.6.1-31.el53.3 - update to revised patch for CVE-2009-0844/CVE-2009-0845 1.6.1-31.el53.2 - add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism 490635, CVE-2009-0844 - add fix for NULL pointer dereference when handling certain error cases in the SPNEGO GSSAPI mechanism 490635...

device-mapper-multipath security update

0.4.7-23.el53.2 - Added 493401multipathdumaskfix.patch - Resolves: bz 493401...

krb5 security update

1.2.7-70 - override $SHLIBEXPFLAGS at build-time to ensure that shared libraries don't include an RPATH internal tools 1.2.7-69 - add backported fix for attempt to free uninitialized pointer in the ASN.1 decoder 491834, CVE-2009-0846 - add backported fix for bug in length validation in the ASN.1...

krb5 security update

1.3.4-60.el47.2 - whoops, actually add the patches 1.3.4-60.el47.1 - add fix for attempt to free uninitialized pointer in the ASN.1 decoder 491835, CVE-2009-0846 - add fix for bug in length validation in the ASN.1 decoder CVE-2009-0847...

java-1.6.0-openjdk security update

1:1.6.0.0-0.30.b09.0.1.el5 - Add oracle-enterprise.patch 1:1.6.0.0-0.30.b09 - Updated java-1.6.0-openjdk-lcms.patch 1:1.6.0.0-0.29.b09 - Updated java-1.6.0-openjdk-lcms.patch 1:1.6.0.0-0.29.b09 - Added java-1.6.0-openjdk-messageutils.patch - Updated release. 1:1.6.0.0-0.28.b09 - Updated...

gstreamer-plugins-base security update

0.10.20-3.0.1 - CVE-2009-0586: integer overflow in gstvorbistagaddcoverart 488210...

php security update

4.3.9-3.22.15 - fix merge of CVE-2008-3658 patch 4.3.9-3.22.14 - add security fixes for CVE-2008-3658, CVE-2008-3660, CVE-2008-5498, CVE-2008-5557, CVE-2009-0754 487360 - split out gd overflow2 and make global with sane symbol name...

php security update

5.1.6-23.2.el5 - ext/gd: fix overflow2 usage for CVE-2007-3996, CVE-2008-3658 5.1.6-23.1.el5 - add security fixes for CVE-2008-3658, CVE-2008-3660, CVE-2008-5498, CVE-2008-5557, CVE-2008-5814, and mbstring funcoverload issue 487369...

kernel security and bug fix update

2.6.18-128.1.6.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

openswan security update

2.6.14-1.2 - security update CVE-2009-0790, CVE-2008-4190 Resolves: CVE-2009-0790, CVE-2008-4190...

seamonkey security update

1.0.9-40.0.1.el4 - Added mozilla-oracle-default-prefs.js, and mozilla-oracle-default-bookmarks.html and removed corresponding Redhat ones 1.0.9-40.el4 - Added fixes from 1.9.0.8...

firefox security update

xulrunner: 1.9.0.7-3.0.1.el5 - Added xulrunner-oracle-default-prefs.js and removed the corresponding RedHat one 1.9.0.7-3 - Updated per 1.9.0.8 firefox: 3.0.7-3.0.1.el4 - Update firstrun and homepage URLS - Add oracle-firefox-branding.patch - Add firefox-oracle-default-prefs.js and...

net-snmp security update

5.0.9-2.30E.27 - rebuild for new rpm 5.0.9-2.30E.26 - fix tcpwrappers checks 485278...

systemtap security update

0.7.2-3.0.1.el53 - Add oracle-enterprise.patch 0.7.2-3 - Resolves: bug 489979, CVE-2009-0784...

NetworkManager security update

0.3.1-5 - CVE-2009-0365: getNetworkKey disclosure - Resolves: 487776...

NetworkManager security update

0.7.0-4 - CVE-2009-0365: GetSecrets disclosure - CVE-2009-0578: local users can modify the connection settings - Resolves: 487778...

thunderbird security update

1.5.0.12-19.0.1.el4 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replaced clean.gif in tarball 1.5.0.12-19 - Update patchset to fix regression as per 1.8.1.21 - Added missing required packages...

glib2 security update

2.12.3-4 - Build with -fno-strict-aliasing 2.12.3-3 - Fix CVE-2008-4316, overflows in the base64 handling functions - Fixes 487497...

curl security update

7.15.5-2.1.el53.4 - another correction of the patch for CVE-2009-0037 7.15.5-2.1.el53.3 - forwardport one hunk from upstream curl-7.15.1 Related: 485290 7.15.5-2.1.el53.2 - fix hunk applied to wrong place due to nonzero patch fuzz Related: 485289 7.15.5-2.1.el53.1 - fix CVE-2009-0037 Resolves:...

libvirt security update

0.3.3-14.0.1.el53.1 - Replaced docs/redhat.gif in tarball 0.3.3-14.el53.1 - Add missing readonly checks for APIs CVE-2008-5086 - Add missing buf check in proxy daemon CVE-2009-0036...

ghostscript security update

8.15.2-9.4:.4 - Avoid dividing by zero while checking for integer overflows. 8.15.2-9.4:.1 - Applied patch to fix CVE-2009-0583 bug 487742 and CVE-2009-0584 bug 487744...

lcms security update

1.18-beta1.1.el53.2 - Add patch theoretically preventing division by zero 1.18-beta1.1.el53.1 - Rebase to upstream 1.18beta1 - CVE-2009-0581 LittleCms memory leak - CVE-2009-0723 LittleCms integer overflow - CVE-2009-0733 LittleCms lack of upper-bounds check on sizes - Resolves: 487513...

evolution-data-server security update

1.12.3-10.el53.3 - Add patch for RH bug 488280 CVE-2009-0547, S/MIME signatures. 1.12.3-10.el53.2 - Add patch for RH bug 488280 CVE-2009-0582, NTLM authentication. 1.12.3-10.el53.1 - Add patch for RH bug 488280 CVE-2009-0587, Base64 encoding...

evolution security update

1.4.5-25 - Fix some typos in the NTLM patch. 1.4.5-24 - Add patch for RH bug 488923 CVE-2009-0587, NTLM authentication. 1.4.5-23 - Add patch for RH bug 488293 CVE-2009-0587, Base64 encoding...

evolution and evolution-data-server security update

evolution: 2.0.2-41.el47.2 - Add patch for RH bug 488439 CVE-2009-0547, S/MIME signatures. 2.0.2-41.el47.1 - Add patch for RH bug 488439 CVE-2009-0582, NTLM authentication. - Add patch for RH bug 488439 CVE-2009-0587, Base64 encoding. evolution-data-server: 1.0.2-14.el47.1 - Add patch for RH bug...

libsoup security update

2.2.98-2.el5.1 - Add patch for RH bug 488030 CVE-2009-0585, soupbase64encode...

kernel security and bug fix update

2.6.9-78.0.17.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

icu security update

3.6-5.11.2 - Resolves: rhbz467949 CVE-2008-1036...

seamonkey security update

1.0.9-38.0.1.el4 - Added mozilla-oracle-default-prefs.js, mozilla-oracle-default-bookmarks.html and removed corresponding ones of Red Hat. 1.0.9-38.el4 - Added mising fix 1.0.9-37.el4 - Added fixes from 1.9.0.7 1.0.9-36.el4 - Fixed build ID...

firefox security update

firefox: 3.0.7-1.0.1 - Update firstrun and homepage URLs - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed the corresponding Red Hat ones - Added patch oracle-firefox-branding.patch 3.0.7-1 - Update to Firefox 3.0.7 3.0.6-2 - Fixed 481805 Unowned directory...

libpng security update

libpng: 1.2.2-29 - Back-port fix for CVE-2009-0040. Resolves: 487165 - Note: so far as I can tell, this version isn't affected by CVE-2008-1382. libpng10: 1.0.13-20 - Fix inter-subpackage Requires, per rpmdiff complaint Related: 487170 1.0.13-19 - Back-port fix for CVE-2009-0040. Resolves: 487170...

wireshark security update

1.0.6-2.0.1.el53 - Add oracle-ocfs2-network.patch 1.0.6-2 - bring back pie - Resolves: 486551 1.0.6-1 - various security flaws fixed - upgrade to 1.0.6 - Resolves: 486551...

libpng security update

1.2.10-7.1.el53.2 - Back-port fixes for CVE-2008-1382 and CVE-2009-0040. Resolves: 487168...

imap security update

2002d-15 - Backport patch for buffer overflows in dmail and tmail from upstream version 2007d CVE-2008-5005, 469667...

cups security update

1.1.17-13.3.56 - Applied patch to fix CVE-2008-3640 STR 2919, bug 486052, which was not fixed in previous attempt...

mod_auth_mysql security update

3.0.0-3.2 - add security fix for CVE-2008-2384 480613...

kernel security update

2.6.18-128.1.1.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

vnc security update

4.1.2-14.el53.1 - CVE-2008-4770...

netpbm security update

10.35-6.1.el53.1 - fix NVR to be greater than previous release in the main branch Related: 472947 10.35-6.el53.1 - fix CVE-2007-2721 and CVE-2008-3520 libjasper issues 472947 Resolves: 472947...

gstreamer-plugins security update

0.8.5-1.0.1.EL.2 - Update release to address ULN up2date 0.8.5-1.EL.2 - Add patch for CVE-2009-0397 Related: rhbz 483217...

gstreamer-plugins security update

0.6.0-19 - Add patch for CVE-2009-0398 Related: rhbz 483216...

gstreamer-plugins-good security update

0.10.9-1.el5.1 - Add patch for CVE-2009-0386 CVE-2009-0387 CVE-2009-0397 Related: rhbz 483220...

sudo security update

1.6.9p17-3.el53.1 - audit patch rediff one chunk failed to apply due to fuzz=0 - Fix for incorrect handling of groups in RunasUser 481720 Resolves: 481820...