"-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
Debian Security Advisory DSA-2025-1 security@debian.org
http://www.debian.org/security/ Steffen Joeris
March 31, 2010 http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package : icedove
Vulnerability : several vulnerabilities
Problem type : remote
Debian-specific: no
CVE IDs : CVE-2009-2408 CVE-2009-2404 CVE-2009-2463
CVE-2009-3072 CVE-2009-3075 CVE-2010-0163

Several remote vulnerabilities have been discovered in the Icedove
mail client, an unbranded version of the Thunderbird mail client. The
Common Vulnerabilities and Exposures project identifies the following
problems:

CVE-2009-2408

Dan Kaminsky and Moxie Marlinspike discovered that icedove does not
properly handle a '

Hawkwind and Hadouken! to play GuilFestDSA 2021-1: New spamass-milter packages fix remote command execution

"-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Important: java-1.6.0-openjdk security update
Advisory ID: RHSA-2010:0339-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2010-0339.html
Issue date: 2010-03-31
CVE Names: CVE-2009-3555 CVE-2010-0082 CVE-2010-0084
CVE-2010-0085 CVE-2010-0088 CVE-2010-0091
CVE-2010-0092 CVE-2010-0093 CVE-2010-0094
CVE-2010-0095 CVE-2010-0837 CVE-2010-0838
CVE-2010-0840 CVE-2010-0845 CVE-2010-0847
CVE-2010-0848
=====================================================================

1. Summary:

Updated java-1.6.0-openjdk packages that fix several security issues are
now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having
important security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux (v. 5 server) - i386, x86_64
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64

3. Description:

These packages provide the OpenJDK 6 Java Runtime Environment and the
OpenJDK 6 Software Development Kit. The Java Runtime Environment (JRE)
contains the software and tools that users need to run applications written
using the Java programming language.

A flaw was found in the way the TLS/SSL (Transport Layer Security/Secure
Sockets Layer) protocols handle session renegotiation. A man-in-the-middle
attacker could use this flaw to prefix arbitrary plain text to a client's
session (for example, an HTTPS connection to a website). This could force
the server to process an attacker's request as if authenticated using the
victim's credentials. (CVE-2009-3555)

This update disables renegotiation in the Java Secure Socket Extension
(JSSE) component. Unsafe renegotiation can be re-enabled using the
sun.security.ssl.allowUnsafeRenegotiation property. Refer to the following
Knowledgebase article for details:
http://kbase.redhat.com/faq/docs/DOC-20491

A number of flaws have been fixed in the Java Virtual Machine (JVM) and in
various Java class implementations. These flaws could allow an unsigned
applet or application to bypass intended access restrictions.
(CVE-2010-0082, CVE-2010-0084, CVE-2010-0085, CVE-2010-0088, CVE-2010-0094)

An untrusted applet could access clipboard information if a drag operation
was performed over that applet's canvas. This could lead to an information
leak. (CVE-2010-0091)

The rawIndex operation incorrectly handled large values, causing the
corruption of internal memory structures, resulting in an untrusted applet
or application crashing. (CVE-2010-0092)

The System.arraycopy operation incorrectly handled large index values,
potentially causing array corruption in an untrusted applet or application.
(CVE-2010-0093)

Subclasses of InetAddress may incorrectly interpret network addresses,
allowing an untrusted applet or application to bypass network access
restrictions. (CVE-2010-0095)

In certain cases, type assignments could result in "non-exact" interface
types. This could be used to bypass type-safety restrictions.
(CVE-2010-0845)

A buffer overflow flaw in LittleCMS (embedded in OpenJDK) could cause an
untrusted applet or application using color profiles from untrusted sources
to crash. (CVE-2010-0838)

An input validation flaw was found in the JRE unpack200 functionality. An
untrusted applet or application could use this flaw to elevate its
privileges. (CVE-2010-0837)

Deferred calls to trusted applet methods could be granted incorrect
permissions, allowing an untrusted applet or application to extend its
privileges. (CVE-2010-0840)

A missing input validation flaw in the JRE could allow an attacker to crash
an untrusted applet or application. (CVE-2010-0848)

A flaw in Java2D could allow an attacker to execute arbitrary code with the
privileges of a user running an untrusted applet or application that uses
Java2D. (CVE-2010-0847)

Note: The flaws concerning applets in this advisory, CVE-2010-0082,
CVE-2010-0084, CVE-2010-0085, CVE-2010-0088, CVE-2010-0091, CVE-2010-0092,
CVE-2010-0093, CVE-2010-0094, CVE-2010-0095, CVE-2010-0837, CVE-2010-0838,
CVE-2010-0840, CVE-2010-0847, and CVE-2010-0848, can only be triggered in
java-1.6.0-openjdk by calling the "appletviewer" application.

This update also provides three defense in depth patches. (BZ#575745,
BZ#575861, BZ#575789)

All users of java-1.6.0-openjdk are advised to upgrade to these updated
packages, which resolve these issues. All running instances of OpenJDK Java
must be restarted for the update to take effect.

4. Solution:

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

533125 - CVE-2009-3555 TLS: MITM attacks via session renegotiation
575736 - CVE-2010-0082 OpenJDK Loader-constraint table allows arrays instead of only the base-classes (6626217)
575740 - CVE-2010-0084 OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872)
575747 - CVE-2010-0085 OpenJDK File TOCTOU deserialization vulnerability (6736390)
575755 - CVE-2010-0088 OpenJDK Inflater/Deflater clone issues (6745393)
575756 - CVE-2010-0091 OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703)
575760 - CVE-2010-0092 OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149)
575764 - CVE-2010-0093 OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265)
575769 - CVE-2010-0094 OpenJDK Deserialization of RMIConnectionImpl objects should enforce stricter checks (6893947)
575772 - CVE-2010-0095 OpenJDK Subclasses of InetAddress may incorrectly interpret network addresses (6893954)
575775 - CVE-2010-0845 OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)
575808 - CVE-2010-0838 OpenJDK CMM readMabCurveData Buffer Overflow Vulnerability (6899653)
575818 - CVE-2010-0837 OpenJDK JAR "unpack200" must verify input parameters (6902299)
575846 - CVE-2010-0840 OpenJDK Applet Trusted Methods Chaining Privilege Escalation Vulnerability (6904691)
575865 - CVE-2010-0848 OpenJDK AWT Library Invalid Index Vulnerability (6914823)
575871 - CVE-2010-0847 OpenJDK ImagingLib arbitrary code execution vulnerability (6914866)

6. Package List:

Red Hat Enterprise Linux Desktop (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/java-1.6.0-openjdk-1.6.0.0-1.11.b16.el5.src.rpm

i386:
java-1.6.0-openjdk-1.6.0.0-1.11.b16.el5.i386.rpm
java-1.6.0-openjdk-debuginfo-1.6.0.0-1.11.b16.el5.i386.rpm
java-1.6.0-openjdk-demo-1.6.0.0-1.11.b16.el5.i386.rpm
java-1.6.0-openjdk-devel-1.6.0.0-1.11.b16.el5.i386.rpm
java-1.6.0-openjdk-javadoc-1.6.0.0-1.11.b16.el5.i386.rpm
java-1.6.0-openjdk-src-1.6.0.0-1.11.b16.el5.i386.rpm

x86_64:
java-1.6.0-openjdk-1.6.0.0-1.11.b16.el5.x86_64.rpm
java-1.6.0-openjdk-debuginfo-1.6.0.0-1.11.b16.el5.x86_64.rpm
java-1.6.0-openjdk-demo-1.6.0.0-1.11.b16.el5.x86_64.rpm
java-1.6.0-openjdk-devel-1.6.0.0-1.11.b16.el5.x86_64.rpm
java-1.6.0-openjdk-javadoc-1.6.0.0-1.11.b16.el5.x86_64.rpm
java-1.6.0-openjdk-src-1.6.0.0-1.11.b16.el5.x86_64.rpm

Red Hat Enterprise Linux (v. 5 server):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/java-1.6.0-openjdk-1.6.0.0-1.11.b16.el5.src.rpm

i386:
java-1.6.0-openjdk-1.6.0.0-1.11.b16.el5.i386.rpm
java-1.6.0-openjdk-debuginfo-1.6.0.0-1.11.b16.el5.i386.rpm
java-1.6.0-openjdk-demo-1.6.0.0-1.11.b16.el5.i386.rpm
java-1.6.0-openjdk-devel-1.6.0.0-1.11.b16.el5.i386.rpm
java-1.6.0-openjdk-javadoc-1.6.0.0-1.11.b16.el5.i386.rpm
java-1.6.0-openjdk-src-1.6.0.0-1.11.b16.el5.i386.rpm

x86_64:
java-1.6.0-openjdk-1.6.0.0-1.11.b16.el5.x86_64.rpm
java-1.6.0-openjdk-debuginfo-1.6.0.0-1.11.b16.el5.x86_64.rpm
java-1.6.0-openjdk-demo-1.6.0.0-1.11.b16.el5.x86_64.rpm
java-1.6.0-openjdk-devel-1.6.0.0-1.11.b16.el5.x86_64.rpm
java-1.6.0-openjdk-javadoc-1.6.0.0-1.11.b16.el5.x86_64.rpm
java-1.6.0-openjdk-src-1.6.0.0-1.11.b16.el5.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

https://www.redhat.com/security/data/cve/CVE-2009-3555.html
https://www.redhat.com/security/data/cve/CVE-2010-0082.html
https://www.redhat.com/security/data/cve/CVE-2010-0084.html
https://www.redhat.com/security/data/cve/CVE-2010-0085.html
https://www.redhat.com/security/data/cve/CVE-2010-0088.html
https://www.redhat.com/security/data/cve/CVE-2010-0091.html
https://www.redhat.com/security/data/cve/CVE-2010-0092.html
https://www.redhat.com/security/data/cve/CVE-2010-0093.html
https://www.redhat.com/security/data/cve/CVE-2010-0094.html
https://www.redhat.com/security/data/cve/CVE-2010-0095.html
https://www.redhat.com/security/data/cve/CVE-2010-0837.html
https://www.redhat.com/security/data/cve/CVE-2010-0838.html
https://www.redhat.com/security/data/cve/CVE-2010-0840.html
https://www.redhat.com/security/data/cve/CVE-2010-0845.html
https://www.redhat.com/security/data/cve/CVE-2010-0847.html
https://www.redhat.com/security/data/cve/CVE-2010-0848.html
http://www.redhat.com/security/updates/classification/#important
http://kbase.redhat.com/faq/docs/DOC-20491

8. Contact:

The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2010 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)

iD8DBQFLtBAgXlSAg2UNWIIRAt2mAJ4klxIvRWik1FJYPs8FUrMLZrmWBQCgm+iF
b4ZTkfaf8Sz7v/xU89JhShE=
=dEPT
-----END PGP SIGNATURE-----
"

RHSA-2010:0173-02 Important: openssl096b security update

"-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Critical: firefox security update
Advisory ID: RHSA-2010:0332-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2010-0332.html
Issue date: 2010-03-30
CVE Names: CVE-2010-0174 CVE-2010-0175 CVE-2010-0176
CVE-2010-0177 CVE-2010-0178 CVE-2010-0179
=====================================================================

1. Summary:

Updated firefox packages that fix several security issues are now available
for Red Hat Enterprise Linux 4 and 5.

The Red Hat Security Response Team has rated this update as having critical
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.

2. Relevant releases/architectures:

RHEL Desktop Workstation (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64
Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux Desktop version 4 - i386, x86_64
Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64

3. Description:

Mozilla Firefox is an open source Web browser. XULRunner provides the XUL
Runtime environment for Mozilla Firefox.

Several use-after-free flaws were found in Firefox. Visiting a web page
containing malicious content could result in Firefox executing arbitrary
code with the privileges of the user running Firefox. (CVE-2010-0175,
CVE-2010-0176, CVE-2010-0177)

A flaw was found in Firefox that could allow an applet to generate a drag
and drop action from a mouse click. Such an action could be used to execute
arbitrary JavaScript with the privileges of the user running Firefox.
(CVE-2010-0178)

A privilege escalation flaw was found in Firefox when the Firebug add-on is
in use. The XMLHttpRequestSpy module in the Firebug add-on exposes a Chrome
privilege escalation flaw that could be used to execute arbitrary
JavaScript with the privileges of the user running Firefox. (CVE-2010-0179)

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause Firefox to crash or,
potentially, execute arbitrary code with the privileges of the user running
Firefox. (CVE-2010-0174)

For technical details regarding these flaws, refer to the Mozilla security
advisories for Firefox 3.0.19. You can find a link to the Mozilla
advisories in the References section of this erratum.

All Firefox users should upgrade to these updated packages, which contain
Firefox version 3.0.19, which corrects these issues. After installing the
update, Firefox must be restarted for the changes to take effect.

4. Solution:

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

578147 - CVE-2010-0174 Mozilla crashes with evidence of memory corruption
578149 - CVE-2010-0175 Mozilla remote code execution with use-after-free in nsTreeSelection
578150 - CVE-2010-0176 Mozilla Dangling pointer vulnerability in nsTreeContentView
578152 - CVE-2010-0177 Mozilla Dangling pointer vulnerability in nsPluginArray
578154 - CVE-2010-0178 Firefox Chrome privilege escalation via forced URL drag and drop
578155 - CVE-2010-0179 Firefox Arbitrary code execution with Firebug XMLHttpRequestSpy

6. Package List:

Red Hat Enterprise Linux AS version 4:

Source:
ftp://updates.redhat.com/enterprise/4AS/en/os/SRPMS/firefox-3.0.19-1.el4.src.rpm

i386:
firefox-3.0.19-1.el4.i386.rpm
firefox-debuginfo-3.0.19-1.el4.i386.rpm

ia64:
firefox-3.0.19-1.el4.ia64.rpm
firefox-debuginfo-3.0.19-1.el4.ia64.rpm

ppc:
firefox-3.0.19-1.el4.ppc.rpm
firefox-debuginfo-3.0.19-1.el4.ppc.rpm

s390:
firefox-3.0.19-1.el4.s390.rpm
firefox-debuginfo-3.0.19-1.el4.s390.rpm

s390x:
firefox-3.0.19-1.el4.s390x.rpm
firefox-debuginfo-3.0.19-1.el4.s390x.rpm

x86_64:
firefox-3.0.19-1.el4.x86_64.rpm
firefox-debuginfo-3.0.19-1.el4.x86_64.rpm

Red Hat Enterprise Linux Desktop version 4:

Source:
ftp://updates.redhat.com/enterprise/4Desktop/en/os/SRPMS/firefox-3.0.19-1.el4.src.rpm

i386:
firefox-3.0.19-1.el4.i386.rpm
firefox-debuginfo-3.0.19-1.el4.i386.rpm

x86_64:
firefox-3.0.19-1.el4.x86_64.rpm
firefox-debuginfo-3.0.19-1.el4.x86_64.rpm

Red Hat Enterprise Linux ES version 4:

Source:
ftp://updates.redhat.com/enterprise/4ES/en/os/SRPMS/firefox-3.0.19-1.el4.src.rpm

i386:
firefox-3.0.19-1.el4.i386.rpm
firefox-debuginfo-3.0.19-1.el4.i386.rpm

ia64:
firefox-3.0.19-1.el4.ia64.rpm
firefox-debuginfo-3.0.19-1.el4.ia64.rpm

x86_64:
firefox-3.0.19-1.el4.x86_64.rpm
firefox-debuginfo-3.0.19-1.el4.x86_64.rpm

Red Hat Enterprise Linux WS version 4:

Source:
ftp://updates.redhat.com/enterprise/4WS/en/os/SRPMS/firefox-3.0.19-1.el4.src.rpm

i386:
firefox-3.0.19-1.el4.i386.rpm
firefox-debuginfo-3.0.19-1.el4.i386.rpm

ia64:
firefox-3.0.19-1.el4.ia64.rpm
firefox-debuginfo-3.0.19-1.el4.ia64.rpm

x86_64:
firefox-3.0.19-1.el4.x86_64.rpm
firefox-debuginfo-3.0.19-1.el4.x86_64.rpm

Red Hat Enterprise Linux Desktop (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/firefox-3.0.19-1.el5_5.src.rpm
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/xulrunner-1.9.0.19-1.el5_5.src.rpm

i386:
firefox-3.0.19-1.el5_5.i386.rpm
firefox-debuginfo-3.0.19-1.el5_5.i386.rpm
xulrunner-1.9.0.19-1.el5_5.i386.rpm
xulrunner-debuginfo-1.9.0.19-1.el5_5.i386.rpm

x86_64:
firefox-3.0.19-1.el5_5.i386.rpm
firefox-3.0.19-1.el5_5.x86_64.rpm
firefox-debuginfo-3.0.19-1.el5_5.i386.rpm
firefox-debuginfo-3.0.19-1.el5_5.x86_64.rpm
xulrunner-1.9.0.19-1.el5_5.i386.rpm
xulrunner-1.9.0.19-1.el5_5.x86_64.rpm
xulrunner-debuginfo-1.9.0.19-1.el5_5.i386.rpm
xulrunner-debuginfo-1.9.0.19-1.el5_5.x86_64.rpm

RHEL Desktop Workstation (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/xulrunner-1.9.0.19-1.el5_5.src.rpm

i386:
xulrunner-debuginfo-1.9.0.19-1.el5_5.i386.rpm
xulrunner-devel-1.9.0.19-1.el5_5.i386.rpm
xulrunner-devel-unstable-1.9.0.19-1.el5_5.i386.rpm

x86_64:
xulrunner-debuginfo-1.9.0.19-1.el5_5.i386.rpm
xulrunner-debuginfo-1.9.0.19-1.el5_5.x86_64.rpm
xulrunner-devel-1.9.0.19-1.el5_5.i386.rpm
xulrunner-devel-1.9.0.19-1.el5_5.x86_64.rpm
xulrunner-devel-unstable-1.9.0.19-1.el5_5.x86_64.rpm

Red Hat Enterprise Linux (v. 5 server):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/firefox-3.0.19-1.el5_5.src.rpm
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/xulrunner-1.9.0.19-1.el5_5.src.rpm

i386:
firefox-3.0.19-1.el5_5.i386.rpm
firefox-debuginfo-3.0.19-1.el5_5.i386.rpm
xulrunner-1.9.0.19-1.el5_5.i386.rpm
xulrunner-debuginfo-1.9.0.19-1.el5_5.i386.rpm
xulrunner-devel-1.9.0.19-1.el5_5.i386.rpm
xulrunner-devel-unstable-1.9.0.19-1.el5_5.i386.rpm

ia64:
firefox-3.0.19-1.el5_5.ia64.rpm
firefox-debuginfo-3.0.19-1.el5_5.ia64.rpm
xulrunner-1.9.0.19-1.el5_5.ia64.rpm
xulrunner-debuginfo-1.9.0.19-1.el5_5.ia64.rpm
xulrunner-devel-1.9.0.19-1.el5_5.ia64.rpm
xulrunner-devel-unstable-1.9.0.19-1.el5_5.ia64.rpm

ppc:
firefox-3.0.19-1.el5_5.ppc.rpm
firefox-debuginfo-3.0.19-1.el5_5.ppc.rpm
xulrunner-1.9.0.19-1.el5_5.ppc.rpm
xulrunner-1.9.0.19-1.el5_5.ppc64.rpm
xulrunner-debuginfo-1.9.0.19-1.el5_5.ppc.rpm
xulrunner-debuginfo-1.9.0.19-1.el5_5.ppc64.rpm
xulrunner-devel-1.9.0.19-1.el5_5.ppc.rpm
xulrunner-devel-1.9.0.19-1.el5_5.ppc64.rpm
xulrunner-devel-unstable-1.9.0.19-1.el5_5.ppc.rpm

s390x:
firefox-3.0.19-1.el5_5.s390.rpm
firefox-3.0.19-1.el5_5.s390x.rpm
firefox-debuginfo-3.0.19-1.el5_5.s390.rpm
firefox-debuginfo-3.0.19-1.el5_5.s390x.rpm
xulrunner-1.9.0.19-1.el5_5.s390.rpm
xulrunner-1.9.0.19-1.el5_5.s390x.rpm
xulrunner-debuginfo-1.9.0.19-1.el5_5.s390.rpm
xulrunner-debuginfo-1.9.0.19-1.el5_5.s390x.rpm
xulrunner-devel-1.9.0.19-1.el5_5.s390.rpm
xulrunner-devel-1.9.0.19-1.el5_5.s390x.rpm
xulrunner-devel-unstable-1.9.0.19-1.el5_5.s390x.rpm

x86_64:
firefox-3.0.19-1.el5_5.i386.rpm
firefox-3.0.19-1.el5_5.x86_64.rpm
firefox-debuginfo-3.0.19-1.el5_5.i386.rpm
firefox-debuginfo-3.0.19-1.el5_5.x86_64.rpm
xulrunner-1.9.0.19-1.el5_5.i386.rpm
xulrunner-1.9.0.19-1.el5_5.x86_64.rpm
xulrunner-debuginfo-1.9.0.19-1.el5_5.i386.rpm
xulrunner-debuginfo-1.9.0.19-1.el5_5.x86_64.rpm
xulrunner-devel-1.9.0.19-1.el5_5.i386.rpm
xulrunner-devel-1.9.0.19-1.el5_5.x86_64.rpm
xulrunner-devel-unstable-1.9.0.19-1.el5_5.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

https://www.redhat.com/security/data/cve/CVE-2010-0174.html
https://www.redhat.com/security/data/cve/CVE-2010-0175.html
https://www.redhat.com/security/data/cve/CVE-2010-0176.html
https://www.redhat.com/security/data/cve/CVE-2010-0177.html
https://www.redhat.com/security/data/cve/CVE-2010-0178.html
https://www.redhat.com/security/data/cve/CVE-2010-0179.html
http://www.redhat.com/security/updates/classification/#critical
http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.19

8. Contact:

The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2010 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)

iD8DBQFLsomDXlSAg2UNWIIRAtLCAKCwhDeNd8NDKPutMczQAGhv4PLWowCePa72
yIL+sEc1I/Xi84x3SH+mzGU=
=WfAT
-----END PGP SIGNATURE-----
"

RHSA-2010:0115-01 Moderate: pidgin security updateSusan Boyle thief to face court

"-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Moderate: curl security, bug fix and enhancement update
Advisory ID: RHSA-2010:0273-05
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2010-0273.html
Issue date: 2010-03-30
CVE Names: CVE-2010-0734
=====================================================================

1. Summary:

Updated curl packages that fix one security issue, various bugs, and add
enhancements are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

2. Relevant releases/architectures:

RHEL Desktop Workstation (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64

3. Description:

cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and DICT
servers, using any of the supported protocols. cURL is designed to work
without user interaction or any kind of interactivity.

Wesley Miaw discovered that when deflate compression was used, libcurl
could call the registered write callback function with data exceeding the
documented limit. A malicious server could use this flaw to crash an
application using libcurl or, potentially, execute arbitrary code. Note:
This issue only affected applications using libcurl that rely on the
documented data size limit, and that copy the data to the insufficiently
sized buffer. (CVE-2010-0734)

This update also fixes the following bugs:

* when using curl to upload a file, if the connection was broken or reset
by the server during the transfer, curl immediately started using 100% CPU
and failed to acknowledge that the transfer had failed. With this update,
curl displays an appropriate error message and exits when an upload fails
mid-transfer due to a broken or reset connection. (BZ#479967)

* libcurl experienced a segmentation fault when attempting to reuse a
connection after performing GSS-negotiate authentication, which in turn
caused the curl program to crash. This update fixes this bug so that reused
connections are able to be successfully established even after
GSS-negotiate authentication has been performed. (BZ#517199)

As well, this update adds the following enhancements:

* curl now supports loading Certificate Revocation Lists (CRLs) from a
Privacy Enhanced Mail (PEM) file. When curl attempts to access sites that
have had their certificate revoked in a CRL, curl refuses access to those
sites. (BZ#532069)

* the curl(1) manual page has been updated to clarify that the "--socks4"
and "--socks5" options do not work with the IPv6, FTPS, or LDAP protocols.
(BZ#473128)

* the curl utility's program help, which is accessed by running "curl -h",
has been updated with descriptions for the "--ftp-account" and
"--ftp-alternative-to-user" options. (BZ#517084)

Users of curl should upgrade to these updated packages, which contain
backported patches to correct these issues and add these enhancements. All
running applications using libcurl must be restarted for the update to take
effect.

4. Solution:

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

479967 - curl uses 100% of CPU if upload connection is broken
517084 - curl program options differ from option in manual page
517199 - curl, libcurl crash when reusing connection after negotiate-auth
563220 - CVE-2010-0734 curl: zlib-compression causes curl to pass more than CURL_MAX_WRITE_SIZE bytes to write callback

6. Package List:

Red Hat Enterprise Linux Desktop (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/curl-7.15.5-9.el5.src.rpm

i386:
curl-7.15.5-9.el5.i386.rpm
curl-debuginfo-7.15.5-9.el5.i386.rpm

x86_64:
curl-7.15.5-9.el5.i386.rpm
curl-7.15.5-9.el5.x86_64.rpm
curl-debuginfo-7.15.5-9.el5.i386.rpm
curl-debuginfo-7.15.5-9.el5.x86_64.rpm

RHEL Desktop Workstation (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/curl-7.15.5-9.el5.src.rpm

i386:
curl-debuginfo-7.15.5-9.el5.i386.rpm
curl-devel-7.15.5-9.el5.i386.rpm

x86_64:
curl-debuginfo-7.15.5-9.el5.i386.rpm
curl-debuginfo-7.15.5-9.el5.x86_64.rpm
curl-devel-7.15.5-9.el5.i386.rpm
curl-devel-7.15.5-9.el5.x86_64.rpm

Red Hat Enterprise Linux (v. 5 server):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/curl-7.15.5-9.el5.src.rpm

i386:
curl-7.15.5-9.el5.i386.rpm
curl-debuginfo-7.15.5-9.el5.i386.rpm
curl-devel-7.15.5-9.el5.i386.rpm

ia64:
curl-7.15.5-9.el5.ia64.rpm
curl-debuginfo-7.15.5-9.el5.ia64.rpm
curl-devel-7.15.5-9.el5.ia64.rpm

ppc:
curl-7.15.5-9.el5.ppc.rpm
curl-7.15.5-9.el5.ppc64.rpm
curl-debuginfo-7.15.5-9.el5.ppc.rpm
curl-debuginfo-7.15.5-9.el5.ppc64.rpm
curl-devel-7.15.5-9.el5.ppc.rpm
curl-devel-7.15.5-9.el5.ppc64.rpm

s390x:
curl-7.15.5-9.el5.s390.rpm
curl-7.15.5-9.el5.s390x.rpm
curl-debuginfo-7.15.5-9.el5.s390.rpm
curl-debuginfo-7.15.5-9.el5.s390x.rpm
curl-devel-7.15.5-9.el5.s390.rpm
curl-devel-7.15.5-9.el5.s390x.rpm

x86_64:
curl-7.15.5-9.el5.i386.rpm
curl-7.15.5-9.el5.x86_64.rpm
curl-debuginfo-7.15.5-9.el5.i386.rpm
curl-debuginfo-7.15.5-9.el5.x86_64.rpm
curl-devel-7.15.5-9.el5.i386.rpm
curl-devel-7.15.5-9.el5.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

https://www.redhat.com/security/data/cve/CVE-2010-0734.html
http://www.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2010 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)

iD8DBQFLsi9FXlSAg2UNWIIRAol1AKChPL8s8Lr6hKQm8f0GAt2gAX8WUACcCD0L
BnQTyrDkxuOZtzzD7ZpGCk8=
=FfJ4
-----END PGP SIGNATURE-----
"

RHSA-2010:0129-01 Moderate: cups security updateSusan Boyle thief to face court

"-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
Debian Security Advisory DSA-2024-1 security@debian.org
http://www.debian.org/security/ Giuseppe Iuculano
March 31, 2010 http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package : moin
Vulnerability : insufficient input sanitising
Problem type : remote
Debian-specific: no
CVE Id : CVE-2010-0828
Debian Bugs : 575995


Jamie Strandboge discovered that moin, a python clone of WikiWiki, does
not sufficiently sanitize the page name in "Despam" action, allowing remote
attackers to perform cross-site scripting (XSS) attacks.

In addition, this update fixes a minor issue in the "textcha" protection, it
could be trivially bypassed by blanking the "textcha-question" and "textcha-answer"
form fields.


For the stable distribution (lenny), these problems have been fixed in
version 1.7.1-3+lenny4.

For the testing (squeeze) and unstable (sid) distribution, these problems
will be fixed soon.

We recommend that you upgrade your moin package.

Upgrade instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian (stable)
- ---------------

Stable updates are available for alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.

Source archives:

http://security.debian.org/pool/updates/main/m/moin/moin_1.7.1.orig.tar.gz
Size/MD5 checksum: 5468224 871337b8171c91f9a6803e5376857e8d
http://security.debian.org/pool/updates/main/m/moin/moin_1.7.1-3+lenny4.diff.gz
Size/MD5 checksum: 90215 c83ca0cbf006907cbce14ad42269eaf9
http://security.debian.org/pool/updates/main/m/moin/moin_1.7.1-3+lenny4.dsc
Size/MD5 checksum: 1259 2bb1030620e321572e13f7d2e56574b5

Architecture independent packages:

http://security.debian.org/pool/updates/main/m/moin/python-moinmoin_1.7.1-3+lenny4_all.deb
Size/MD5 checksum: 4510612 95a833e0e44a293e5e437c7f2cace485


These files will probably be moved into the stable distribution on
its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show ' and http://packages.debian.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkuzCiYACgkQNxpp46476apl2QCfauKKb6dn9S7/Dt2eiXw1JH0H
3l4An2+S6vWkbtxykknzxq0l2aezNoTd
=zSnw
-----END PGP SIGNATURE-----
"

T in the Park tickets sell outDSA 2013-1: New egroupware packages fix several vulnerabilities

"-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Low: brltty security and bug fix update
Advisory ID: RHSA-2010:0181-05
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2010-0181.html
Issue date: 2010-03-30
CVE Names: CVE-2008-3279
=====================================================================

1. Summary:

Updated brltty packages that fix one security issue and several bugs are
now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having low
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

2. Relevant releases/architectures:

RHEL Desktop Workstation (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64

3. Description:

brltty (Braille TTY) is a background process (daemon) which provides access
to the Linux console (when in text mode) for a blind person using a
refreshable braille display. It drives the braille display, and provides
complete screen review functionality.

It was discovered that a brltty library had an insecure relative RPATH
(runtime library search path) set in the ELF (Executable and Linking
Format) header. A local user able to convince another user to run an
application using brltty in an attacker-controlled directory, could run
arbitrary code with the privileges of the victim. (CVE-2008-3279)

These updated packages also provide fixes for the following bugs:

* the brltty configuration file is documented in the brltty manual page,
but there is no separate manual page for the /etc/brltty.conf configuration
file: running "man brltty.conf" returned "No manual entry for brltty.conf"
rather than opening the brltty manual entry. This update adds brltty.conf.5
as an alias to the brltty manual page. Consequently, running "man
brltty.conf" now opens the manual entry documenting the brltty.conf
specification. (BZ#530554)

* previously, the brltty-pm.conf configuration file was installed in the
/etc/brltty/ directory. This file, which configures Papenmeier Braille
Terminals for use with Red Hat Enterprise Linux, is optional. As well, it
did not come with a corresponding manual page. With this update, the file
has been moved to /usr/share/doc/brltty-3.7.2/BrailleDrivers/Papenmeier/.
This directory also includes a README document that explains the file's
purpose and format. (BZ#530554)

* during the brltty packages installation, the message

Creating screen inspection device /dev/vcsa...done.

was presented at the console. This was inadequate, especially during the
initial install of the system. These updated packages do not send any
message to the console during installation. (BZ#529163)

* although brltty contains ELF objects, the brltty-debuginfo package was
empty. With this update, the -debuginfo package contains valid debugging
information as expected. (BZ#500545)

* the MAX_NR_CONSOLES definition was acquired by brltty by #including
linux/tty.h in Programs/api_client.c. MAX_NR_CONSOLES has since moved to
linux/vt.h but the #include in api_client.c was not updated. Consequently,
brltty could not be built from the source RPM against the Red Hat
Enterprise Linux 5 kernel. This update corrects the #include in
api_client.c to linux/vt.h and brltty now builds from source as expected.
(BZ#456247)

All brltty users are advised to upgrade to these updated packages, which
resolve these issues.

4. Solution:

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

456247 - brltty doesn't build with kernel 2.6.18-92.1.1
457942 - CVE-2008-3279 brltty: insecure relative RPATH
500545 - brltty-debuginfo is empty
529163 - Creating screen inspection device /dev/vcsa...done.
530554 - Missing man-pages

6. Package List:

Red Hat Enterprise Linux Desktop (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/brltty-3.7.2-4.el5.src.rpm

i386:
brlapi-0.4.1-4.el5.i386.rpm
brltty-3.7.2-4.el5.i386.rpm
brltty-debuginfo-3.7.2-4.el5.i386.rpm

x86_64:
brlapi-0.4.1-4.el5.i386.rpm
brlapi-0.4.1-4.el5.x86_64.rpm
brltty-3.7.2-4.el5.x86_64.rpm
brltty-debuginfo-3.7.2-4.el5.i386.rpm
brltty-debuginfo-3.7.2-4.el5.x86_64.rpm

RHEL Desktop Workstation (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/brltty-3.7.2-4.el5.src.rpm

i386:
brlapi-devel-0.4.1-4.el5.i386.rpm
brltty-debuginfo-3.7.2-4.el5.i386.rpm

x86_64:
brlapi-devel-0.4.1-4.el5.i386.rpm
brlapi-devel-0.4.1-4.el5.x86_64.rpm
brltty-debuginfo-3.7.2-4.el5.i386.rpm
brltty-debuginfo-3.7.2-4.el5.x86_64.rpm

Red Hat Enterprise Linux (v. 5 server):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/brltty-3.7.2-4.el5.src.rpm

i386:
brlapi-0.4.1-4.el5.i386.rpm
brlapi-devel-0.4.1-4.el5.i386.rpm
brltty-3.7.2-4.el5.i386.rpm
brltty-debuginfo-3.7.2-4.el5.i386.rpm

ia64:
brlapi-0.4.1-4.el5.ia64.rpm
brlapi-devel-0.4.1-4.el5.ia64.rpm
brltty-3.7.2-4.el5.ia64.rpm
brltty-debuginfo-3.7.2-4.el5.ia64.rpm

ppc:
brlapi-0.4.1-4.el5.ppc.rpm
brlapi-0.4.1-4.el5.ppc64.rpm
brlapi-devel-0.4.1-4.el5.ppc.rpm
brlapi-devel-0.4.1-4.el5.ppc64.rpm
brltty-3.7.2-4.el5.ppc.rpm
brltty-debuginfo-3.7.2-4.el5.ppc.rpm
brltty-debuginfo-3.7.2-4.el5.ppc64.rpm

s390x:
brlapi-0.4.1-4.el5.s390.rpm
brlapi-0.4.1-4.el5.s390x.rpm
brlapi-devel-0.4.1-4.el5.s390.rpm
brlapi-devel-0.4.1-4.el5.s390x.rpm
brltty-3.7.2-4.el5.s390x.rpm
brltty-debuginfo-3.7.2-4.el5.s390.rpm
brltty-debuginfo-3.7.2-4.el5.s390x.rpm

x86_64:
brlapi-0.4.1-4.el5.i386.rpm
brlapi-0.4.1-4.el5.x86_64.rpm
brlapi-devel-0.4.1-4.el5.i386.rpm
brlapi-devel-0.4.1-4.el5.x86_64.rpm
brltty-3.7.2-4.el5.x86_64.rpm
brltty-debuginfo-3.7.2-4.el5.i386.rpm
brltty-debuginfo-3.7.2-4.el5.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

https://www.redhat.com/security/data/cve/CVE-2008-3279.html
http://www.redhat.com/security/updates/classification/#low

8. Contact:

The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2010 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)

iD8DBQFLsi26XlSAg2UNWIIRAmTIAJ9+7Ft9t8BpwRIScVebgfWmwI2cHACdFre1
7+vEYGXYuFRuAmJY0uVkt34=
=gKBp
-----END PGP SIGNATURE-----
"

Susan Boyle thief to face courtRHSA-2010:0129-01 Moderate: cups security update

"-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Important: kvm security, bug fix and enhancement update
Advisory ID: RHSA-2010:0271-04
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2010-0271.html
Issue date: 2010-03-30
CVE Names: CVE-2010-0741
=====================================================================

1. Summary:

Updated kvm packages that fix one security issue, multiple bugs, and add
enhancements are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having
important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.

2. Relevant releases/architectures:

RHEL Desktop Multi OS (v. 5 client) - x86_64
RHEL Virtualization (v. 5 server) - x86_64

3. Description:

KVM (Kernel-based Virtual Machine) is a full virtualization solution for
Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for
the standard Red Hat Enterprise Linux kernel.

A flaw was found in the way QEMU-KVM handled erroneous data provided by
the Linux virtio-net driver, used by guest operating systems. Due to a
deficiency in the TSO (TCP segment offloading) implementation, a guest's
virtio-net driver would transmit improper data to a certain QEMU-KVM
process on the host, causing the guest to crash. A remote attacker could
use this flaw to send specially-crafted data to a target guest system,
causing that guest to crash. (CVE-2010-0741)

Additionally, these updated packages include numerous bug fixes and
enhancements. Refer to the KVM chapter of the Red Hat Enterprise Linux 5.5
Technical Notes for details:

http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.5/html/Technical_Notes/kvm.html

All KVM users should upgrade to these updated packages, which resolve this
issue as well as fixing the bugs and adding the enhancements noted in the
Technical Notes. Note: The procedure in the Solution section must be
performed before this update will take effect.

4. Solution:

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

The following procedure must be performed before this update will take
effect:

1) Stop all KVM guest virtual machines.

2) Either reboot the hypervisor machine or, as the root user, remove (using
"modprobe -r [module]") and reload (using "modprobe [module]") all of the
following modules which are currently running (determined using "lsmod"):
kvm, ksm, kvm-intel or kvm-amd.

3) Restart the KVM guest virtual machines.

5. Bugs fixed (http://bugzilla.redhat.com/):

508040 - Windows XP not using all CPUS
510706 - qemu-kvm segfault when using i82551 vnic
511072 - KVM - qemu-img fail to copy a RAW format image over FCP storage
512672 - Remove initrd warning message
515549 - upstream qemu issues on rhel 5.4
515655 - Add result test to prevent Infinite loop in raw_pread, reading too large offset
515749 - Remove warnings from kvm compilation
516545 - qemu-kvm crashed when setting 32bitwin28k with 64G ram
516672 - Disable unused/unsupported features on qemu-kvm
516762 - qemu aborted when restart 32bitwin23k with more than 4G mem in intel host.
517223 - BUG: warning at /builddir/build/BUILD/kvm-83-maint-snapshot-20090205/kernel-/x86/x86.c:240/kvm_queue_exception_e() (Tainted: G )
518090 - [RFE] KVM should be able to export advanced cpu flags to the guest
518169 - Bad qcow2 performance with cache=off
519397 - KVM: MMU: make __kvm_mmu_free_some_pages handle empty list (upstream backport)
520285 - windows 64 bit does vmexit on each cr8 access.
521025 - rtc-td-hack stopped working. Time drifts in windows
521749 - Guest Window2008-R2-datacenter installation is stopped at step "Setup will continue after restarting your computer" (AMD host only)
521835 - German keymap using KVM+VNC missing some keys
522887 - Call to migrate_set_speed after a migrate_cancel causes segmentation fault in kvm
524970 - Guest single-cpu IPI leads to a global IPI on host
525323 - QEMU terminates without warning with virtio-net and SMP enabled
525699 - x86_64 guest hang when set guest's cpu1 online on AMD host
526124 - ne model failed to get ip address
526837 - KVM: x86: verify MTRR/PAT validity (upstream backport)
527722 - Build tree for RHEL 5.X and RHEL 5.4.z contains build bugs
528310 - when kvm is load, Kernel panic on rebooting after implement suspend and resume
529694 - -initrd is broken with > 4GB guests
530134 - RFE - In-place backing file format change
530533 - debug message is displayed when save VM state into a compressed file
531631 - Windows XP unattended install doesn't get an IP address after rebooting, if using -net user
531701 - pvclock msr values are not preserved across remote migration
531827 - O/S Filesystem Corruption with RHEL-5.4 on a RHEV Guest
532086 - Rhev-Block driver causes 'unhandled vm exit' with 32bit win2k3r2sp2 Guest VM on restart
533059 - kvm modules can't be built against latest kernel-devel package
533197 - kvm kmod package should filter only some specific ksym dependencies
533390 - RHEL5.4 VM image corruption with an IDE v-disk
533453 - kvm kmod package should require a compatible kernel version
537075 - qcow2: infinite recursion on grow_refcount_table() error handling
537077 - error codes aren't always propagated up through the block layer (e.g. -ENOSPC)
537646 - backports of qemu barrier support
537655 - qemu-img: error creating a new preallocated volume image on FCP storage
537888 - fix unsafe device data handling
539250 - Cannot eject cd-rom when configured to host cd-rom
539589 - kvm can't build against kernel-2.6.18-174.el5
540893 - qemu-img: snapshot info error
541084 - KVM: x86: Add KVM_GET/SET_VCPU_EVENTS
541731 - kvm: migration: mechanism to make older savevm versions to be emitted on some cases
542923 - Get segmentation fault when running with ide block on kvm-83-136.el5
543137 - time drift in win2k364 KVM guest
543979 - gPXE fails to PXE boot on e1000 virtual NIC
545136 - CVE-2010-0741 whitelist host virtio networking features
545194 - Discrepancy between man page and source code for qcow2 with regards to default value used when no explicit caching is specified
546019 - kvm: use gpxe PXE roms if available
546039 - [FEAT] Supported KVM guests for RHEL5.5
549938 - Maintain barrier state after migration
550053 - require newer etherboot package that is compatible with new pxe ROM paths
550265 - gPXE fails to PXE boot on e1000 virtual NIC
550755 - Hypercall driver doesn't reset device on power-down
552487 - Guest image corruption after RHEV-H update to 5.4-2.1.3.el5_4rhev2_1 using virtio-blk
553187 - Add rhel-5.4.4 support to rhel5.5.0
555780 - iozone test can not finish when using virtio_blk in RHEL5u4 guest.
557327 - migration failed with -M rhel5.4.4 between host 5.5 and host 5.4.4
558195 - kvm: NFS : kvm-qemu-img convert failure on RAW/Sparse template with COW/Sparse snapshot
559163 - migration failed host 5.5 with -M rhel5.5.0 to host 5.5 with -M rhel5.5.0.
559509 - KVM:Wake up from hibernation operation failed ( migration to file )
563141 - qemu-img re-base subcommand got Segmentation fault
569762 - 'qemu-img re-base' broken on block devices
577218 - CVE-2010-0741 qemu: Improper handling of erroneous data provided by Linux virtio-net driver

6. Package List:

RHEL Desktop Multi OS (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/kvm-83-164.el5.src.rpm

x86_64:
kmod-kvm-83-164.el5.x86_64.rpm
kvm-83-164.el5.x86_64.rpm
kvm-debuginfo-83-164.el5.x86_64.rpm
kvm-qemu-img-83-164.el5.x86_64.rpm
kvm-tools-83-164.el5.x86_64.rpm

RHEL Virtualization (v. 5 server):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/kvm-83-164.el5.src.rpm

x86_64:
kmod-kvm-83-164.el5.x86_64.rpm
kvm-83-164.el5.x86_64.rpm
kvm-debuginfo-83-164.el5.x86_64.rpm
kvm-qemu-img-83-164.el5.x86_64.rpm
kvm-tools-83-164.el5.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

https://www.redhat.com/security/data/cve/CVE-2010-0741.html
http://www.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2010 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)

iD8DBQFLsi8fXlSAg2UNWIIRAgfYAJ9LZwTOO4UlmeSOQJZQ7zotl0ZBLQCfeLn2
lByI1aSKVsI9RnlzTJqYoIY=
=CCMj
-----END PGP SIGNATURE-----
"

RHSA-2010:0126-01 Important: kvm security and bug fix updateCypress Hill ‘Trouble Seeker’ collaboration clip