firefox - Mozilla Firefox Web browser.

Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.

Change Log:

Sat, 20 Oct 2007 GMT - Johnny Hughes <johnny@centos.org> - 1.5.0.12-0.7.el4.centos
- Added CACert as a default CA (add_CAcert.org_cert.patch)
- replaced firefox-redhat-default-bookmarks.html with
  firefox-centos-default-bookmarks.html
- replaced firefox-redhat-default-prefs.js with firefox-centos-default-prefs.js

Thu, 18 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.5.0.12-0.7.el4
- Update to latest snapshot of Mozilla 1.8.0 branch

Wed, 17 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.5.0.12-0.6.el4
- added pathes for Mozilla bugs 325761 and 392149

...

pcre - Perl-compatible regular expression library

Perl-compatible regular expression library.
PCRE has its own native API, but a set of "wrapper" functions that are based on
the POSIX API are also supplied in the library libpcreposix. Note that this
just provides a POSIX calling interface to PCRE: the regular expressions
themselves still follow Perl syntax and semantics. The header file
for the POSIX-style functions is called pcreposix.h.

Change Log:

Thu, 11 Oct 2007 GMT - Than Ngo <than@redhat.com> - 4.5-4.1
- Resolves: #315971, CVE-2007-1660

Thu, 11 Oct 2007 GMT - Than Ngo <than@redhat.com> - 4.5-4
- Resolves: #315971, CVE-2007-1660

Fri, 19 Aug 2005 GMT - Than Ngo <than@redhat.com> 4.5-3.2.RHEL4
- bump release

...

pcre-devel - Development files for pcre

Development files (Headers, libraries for static linking, etc) for pcre.

Change Log:

Thu, 11 Oct 2007 GMT - Than Ngo <than@redhat.com> - 4.5-4.1
- Resolves: #315971, CVE-2007-1660

Thu, 11 Oct 2007 GMT - Than Ngo <than@redhat.com> - 4.5-4
- Resolves: #315971, CVE-2007-1660

Fri, 19 Aug 2005 GMT - Than Ngo <than@redhat.com> 4.5-3.2.RHEL4
- bump release

...

tzdata - Timezone data

This package contains data files with rules for various timezones around
the world.

Change Log:

Mon, 01 Oct 2007 GMT - Petr Machata <pmachata@redhat.com> - 2007h-1.el4
- Upstream 2007h
  - Brazil will observe DST from 2007-10-14 to 2008-02-17
  - Egypt and Gaza switched earlier than we expected
  - Iran will resume DST next year
  - Venezuela is scheduled to change TZ to -4:30 on January 1
- Resolves: #298091
- Resolves: #266881

Thu, 20 Sep 2007 GMT - Petr Machata <pmachata@redhat.com> - 2007g-1.el4
- Upstream 2007g
  - Egypt switches the September 7, not September 28
  - Daviess, Dubous, Knox, Martin, and Pike Counties, Indiana, switch
    from central to eastern time in November
  - South Australia, Tasmania, Victoria, and New South Wales are
    changing their DST rules effective next year
  - Several Antarctic station's rules weren't properly updated to account
    for this year's change to the New Zealand daylight saving rules
- Venezuela timezone changes from -4:00 to -4:30 at 24 September
- Resolves: #298091
- Resolves: #266881

Tue, 03 Jul 2007 GMT - Petr Machata <pmachata@redhat.com> - 2007f-1.el4
- Upstream 2007f
  - New Zealand is extending DST, starting later this year.
  - Haiti no longer observes DST.
  - The Turks and Caicos switch at 02:00, not at 00:00, and have
    adopted US DST rules.
- Upstream 2007e
  - Syria switched to summer time at Mar/29.
  - Honduras will not enter DST this year.
- Resolves: #241812

...

elinks - A text-mode Web browser.

Links is a text-based Web browser. Links does not display any images,
but it does support frames, tables and most other HTML tags. Links'
advantage over graphical browsers is its speed--Links starts and exits
quickly and swiftly displays Web pages.

Change Log:

Thu, 27 Sep 2007 GMT - Karel Zak <kzak@redhat.com> 0.9.2-3.3.5.2
- fix elinks-0.9.2-httpspostdata.patch (#303881)

Wed, 26 Sep 2007 GMT - Lubomir Kundrak <lkundrak@redhat.com> 0.9.2-3.3.5.1
- fix #297611 - CVE-2007-5034 elinks reveals POST data to HTTPS proxy

Wed, 15 Nov 2006 GMT - Karel Zak <kzak@redhat.com> 0.9.2-3.3
- fix #215731 - elinks smb protocol arbitrary file access

...

seamonkey - Web browser and mail reader

Mozilla is an open-source web browser, designed for standards
compliance, performance and portability.

Change Log:

Sat, 20 Oct 2007 GMT - Johnny Hughes <johnny@centos.org> 1.0.9-6.el4.centos
- Added CACert.org patch as trusted CA (add_CAcert.org_cert.patch)
- Replaced mozilla-redhat-default-bookmarks.html with
  mozilla-centos-default-bookmarks.html
- Replaced mozilla-redhat-default-prefs.js with mozilla-centos-default-prefs.js

Thu, 18 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-6.el4
- Update to latest snapshot of Mozilla 1.8.0 branch

Wed, 17 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-5.el4
- added pathes for Mozilla bugs 267833,309322,345305,361745,
  362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
  390078,393537,395942,325761,392149

...

flac - An encoder/decoder for the Free Lossless Audio Codec.

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC
is similar to Ogg Vorbis, but lossless. The FLAC project consists of
the stream format, reference encoders and decoders in library form,
flac, a command-line program to encode and decode FLAC files, metaflac,
a command-line metadata editor for FLAC files and input plugins for
various music players (the xmms plugin is in a sub-package).

Change Log:

Mon, 22 Oct 2007 GMT - - Bastien Nocera <bnocera@redhat.com> 1.1.0-7.el_4.2
- Add RHEL-5 patch to remove execstack requirement
Related: rhbz #332591

Wed, 17 Oct 2007 GMT - - Bastien Nocera <bnocera@redhat.com> 1.1.0-7.el_4.1
- Add patch from Takashi Iwai to fix CVE-2007-4619
Resolves: rhbz #332591

Thu, 15 Jul 2004 GMT - Tim Waugh <twaugh@redhat.com> 1.1.0-7
- Fixed warnings in shipped m4 file.

...

libpng10 - Old version of libpng, needed to run old binaries.

The libpng10 package contains an old version of libpng, a library of
functions for creating and manipulating PNG (Portable Network Graphics)
image format files.

This package is needed if you want to run binaries that were linked dynamically
with libpng 1.0.x.

Change Log:

Fri, 19 Oct 2007 GMT - Tom Lane <tgl@redhat.com> 1.0.16-3.el4_5.1
- Back-port critical fixes from libpng 1.0.30, primarily to fix CVE-2007-5269
Resolves: #337561

Sun, 13 May 2007 GMT - Tom Lane <tgl@redhat.com> 1.0.16-3
- Add patch to fix CVE-2006-5793
Resolves: #215405

Sat, 12 May 2007 GMT - Tom Lane <tgl@redhat.com> 1.0.16-2
- Add patch to fix CVE-2007-2445
Resolves: #239543

...

flac-devel - Static libraries and header files from FLAC.

This package contains all the files needed to develop applications that
will use the Free Lossless Audio Codec.

Change Log:

Mon, 22 Oct 2007 GMT - - Bastien Nocera <bnocera@redhat.com> 1.1.0-7.el_4.2
- Add RHEL-5 patch to remove execstack requirement
Related: rhbz #332591

Wed, 17 Oct 2007 GMT - - Bastien Nocera <bnocera@redhat.com> 1.1.0-7.el_4.1
- Add patch from Takashi Iwai to fix CVE-2007-4619
Resolves: rhbz #332591

Thu, 15 Jul 2004 GMT - Tim Waugh <twaugh@redhat.com> 1.1.0-7
- Fixed warnings in shipped m4 file.

...

xmms-flac - XMMS input plugin needed to play FLAC (Free Lossless Audio Codec) files.

FLAC is a Free Lossless Audio Codec. The FLAC format supports
streaming, seeking, and archival, and gives 25-75% compression on
typical CD audio.
This is the input plugin for XMMS to be able to FLAC files.

Change Log:

Mon, 22 Oct 2007 GMT - - Bastien Nocera <bnocera@redhat.com> 1.1.0-7.el_4.2
- Add RHEL-5 patch to remove execstack requirement
Related: rhbz #332591

Wed, 17 Oct 2007 GMT - - Bastien Nocera <bnocera@redhat.com> 1.1.0-7.el_4.1
- Add patch from Takashi Iwai to fix CVE-2007-4619
Resolves: rhbz #332591

Thu, 15 Jul 2004 GMT - Tim Waugh <twaugh@redhat.com> 1.1.0-7
- Fixed warnings in shipped m4 file.

...

libpng - A library of functions for manipulating PNG image format files.

The libpng package contains a library of functions for creating and
manipulating PNG (Portable Network Graphics) image format files.  PNG
is a bit-mapped graphics format similar to the GIF format.  PNG was
created to replace the GIF format, since GIF uses a patented data
compression algorithm.

Libpng should be installed if you need to manipulate PNG format image
files.

Change Log:

Fri, 19 Oct 2007 GMT - Tom Lane <tgl@redhat.com> 2:1.2.7-3.el4_5.1
- Back-port critical fixes from libpng 1.2.22, primarily to fix CVE-2007-5269
Resolves: #337501
- Update License tag and some other obsolete bits in specfile

Sun, 13 May 2007 GMT - Tom Lane <tgl@redhat.com> 2:1.2.7-3.el4
- Add patch to fix CVE-2006-5793
Resolves: #215405

Sat, 12 May 2007 GMT - Tom Lane <tgl@redhat.com> 2:1.2.7-2.el4
- Add patch to fix CVE-2007-2445
Resolves: #239543

...

libpng10-devel - Development tools for version 1.0 of libpng

The libpng10-devel package contains the header files and static
libraries necessary for developing programs using version 1.0
of the PNG (Portable Network Graphics) library.

If you want to develop programs which will manipulate PNG image
format files, while still running on previous Red Hat Linux releases,
you should install libpng10-devel.  You'll also need to install the
libpng10 package.

Change Log:

Fri, 19 Oct 2007 GMT - Tom Lane <tgl@redhat.com> 1.0.16-3.el4_5.1
- Back-port critical fixes from libpng 1.0.30, primarily to fix CVE-2007-5269
Resolves: #337561

Sun, 13 May 2007 GMT - Tom Lane <tgl@redhat.com> 1.0.16-3
- Add patch to fix CVE-2006-5793
Resolves: #215405

Sat, 12 May 2007 GMT - Tom Lane <tgl@redhat.com> 1.0.16-2
- Add patch to fix CVE-2007-2445
Resolves: #239543

...

libpng-devel - Development tools for programs to manipulate PNG image format files.

The libpng-devel package contains the header files and static
libraries necessary for developing programs using the PNG (Portable
Network Graphics) library.

If you want to develop programs which will manipulate PNG image format
files, you should install libpng-devel.  You'll also need to install
the libpng package.

Change Log:

Fri, 19 Oct 2007 GMT - Tom Lane <tgl@redhat.com> 2:1.2.7-3.el4_5.1
- Back-port critical fixes from libpng 1.2.22, primarily to fix CVE-2007-5269
Resolves: #337501
- Update License tag and some other obsolete bits in specfile

Sun, 13 May 2007 GMT - Tom Lane <tgl@redhat.com> 2:1.2.7-3.el4
- Add patch to fix CVE-2006-5793
Resolves: #215405

Sat, 12 May 2007 GMT - Tom Lane <tgl@redhat.com> 2:1.2.7-2.el4
- Add patch to fix CVE-2007-2445
Resolves: #239543

...

perl - The Perl programming language.

Perl is a high-level programming language with roots in C, sed, awk
and shell scripting.  Perl is good at handling processes and files,
and is especially good at handling text.  Perl's hallmarks are
practicality and efficiency.  While it is used to do a lot of
different things, Perl's most common applications are system
administration utilities and web programming.  A large proportion of
the CGI scripts on the web are written in Perl.  You need the perl
package installed on your system so that your system can handle Perl
scripts.

Install this package if you want to program in Perl or enable your
system to handle Perl scripts.

Change Log:

Mon, 22 Oct 2007 GMT - Robin Norwood <rnorwood@redhat.com> - 3:5.8.5-36.el4.2
- Resolves: bug#323791
- fix previous patch

Wed, 10 Oct 2007 GMT - Robin Norwood <rnorwood@redhat.com> - 3:5.8.5-36.el4.1
- Resolves: bug#323791
- fix regular expression UTF parsing errors

Mon, 24 Jul 2006 GMT - Jason Vas Dias <jvdias@redhat.com> - 3:5.8.5-36.RHEL-4
- fix bug 199916 / CVE-2005-0155 - disable PERLIO_DEBUG under setuid perl

...

perl-suidperl - suidperl, for use with setuid perl scripts

suidperl is a setuid binary copy of perl that allows for (hopefully)
more secure running of setuid perl scripts.

Change Log:

Mon, 22 Oct 2007 GMT - Robin Norwood <rnorwood@redhat.com> - 3:5.8.5-36.el4.2
- Resolves: bug#323791
- fix previous patch

Wed, 10 Oct 2007 GMT - Robin Norwood <rnorwood@redhat.com> - 3:5.8.5-36.el4.1
- Resolves: bug#323791
- fix regular expression UTF parsing errors

Mon, 24 Jul 2006 GMT - Jason Vas Dias <jvdias@redhat.com> - 3:5.8.5-36.RHEL-4
- fix bug 199916 / CVE-2005-0155 - disable PERLIO_DEBUG under setuid perl

...

kdebase - K Desktop Environment - core files

Core applications for the K Desktop Environment.  Included are: kdm
(replacement for xdm), kwin (window manager), konqueror (filemanager,
web browser, ftp client, ...), konsole (xterm replacement), kpanel
(application starter and desktop pager), kaudio (audio server),
kdehelp (viewer for kde help files, info and man pages), kthememgr
(system for managing alternate theme packages) plus other KDE
components (kcheckpass, kikbd, kscreensaver, kcontrol, kfind,
kfontmanager, kmenuedit).

Change Log:

Fri, 21 Sep 2007 GMT - Than Ngo <than@redhat.com> - 6:3.3.1-6.l4
- Resolves: #290851,
  CVE-2007-4569, kdm password-less login vulnerability
  CVE-2007-3820, CVE-2007-4224 CVE-2007-4225, Konqueror address bar spoofing

Mon, 11 Jun 2007 GMT - Than Ngo <than@redhat.com> - 6:3.3.1-5.19.rhel4
- Resolves: bz#243620, KDE flash player workaround, CVE-2007-2022

Mon, 29 Jan 2007 GMT - Than Ngo <than@redhat.com> - 6:3.3.1-5.18.rhel4
- add missing Buildreq on lm_sensors-devel

...

seamonkey-js-debugger - JavaScript debugger for use with Mozilla

JavaScript debugger for use with Mozilla.

Change Log:

Sat, 20 Oct 2007 GMT - Johnny Hughes <johnny@centos.org> 1.0.9-6.el4.centos
- Added CACert.org patch as trusted CA (add_CAcert.org_cert.patch)
- Replaced mozilla-redhat-default-bookmarks.html with
  mozilla-centos-default-bookmarks.html
- Replaced mozilla-redhat-default-prefs.js with mozilla-centos-default-prefs.js

Thu, 18 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-6.el4
- Update to latest snapshot of Mozilla 1.8.0 branch

Wed, 17 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-5.el4
- added pathes for Mozilla bugs 267833,309322,345305,361745,
  362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
  390078,393537,395942,325761,392149

...

seamonkey-mail - Mozilla-based mail system

Mail/news client based on the Mozilla web browser.  The mail/news
client supports IMAP, POP, and NNTP and has an easy to use interface.

Change Log:

Sat, 20 Oct 2007 GMT - Johnny Hughes <johnny@centos.org> 1.0.9-6.el4.centos
- Added CACert.org patch as trusted CA (add_CAcert.org_cert.patch)
- Replaced mozilla-redhat-default-bookmarks.html with
  mozilla-centos-default-bookmarks.html
- Replaced mozilla-redhat-default-prefs.js with mozilla-centos-default-prefs.js

Thu, 18 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-6.el4
- Update to latest snapshot of Mozilla 1.8.0 branch

Wed, 17 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-5.el4
- added pathes for Mozilla bugs 267833,309322,345305,361745,
  362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
  390078,393537,395942,325761,392149

...

seamonkey-dom-inspector - A tool for inspecting the DOM of pages in Mozilla.

This is a tool that allows you to inspect the DOM for web pages in
Mozilla.  This is of great use to people who are doing Mozilla chrome
development or web page development.

Change Log:

Sat, 20 Oct 2007 GMT - Johnny Hughes <johnny@centos.org> 1.0.9-6.el4.centos
- Added CACert.org patch as trusted CA (add_CAcert.org_cert.patch)
- Replaced mozilla-redhat-default-bookmarks.html with
  mozilla-centos-default-bookmarks.html
- Replaced mozilla-redhat-default-prefs.js with mozilla-centos-default-prefs.js

Thu, 18 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-6.el4
- Update to latest snapshot of Mozilla 1.8.0 branch

Wed, 17 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-5.el4
- added pathes for Mozilla bugs 267833,309322,345305,361745,
  362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
  390078,393537,395942,325761,392149

...

seamonkey-devel - Development files for Mozilla

Development header files for mozilla.

Change Log:

Sat, 20 Oct 2007 GMT - Johnny Hughes <johnny@centos.org> 1.0.9-6.el4.centos
- Added CACert.org patch as trusted CA (add_CAcert.org_cert.patch)
- Replaced mozilla-redhat-default-bookmarks.html with
  mozilla-centos-default-bookmarks.html
- Replaced mozilla-redhat-default-prefs.js with mozilla-centos-default-prefs.js

Thu, 18 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-6.el4
- Update to latest snapshot of Mozilla 1.8.0 branch

Wed, 17 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-5.el4
- added pathes for Mozilla bugs 267833,309322,345305,361745,
  362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
  390078,393537,395942,325761,392149

...

seamonkey-chat - IRC client integrated with Mozilla

IRC client that is integrated with the Mozilla web browser.

Change Log:

Sat, 20 Oct 2007 GMT - Johnny Hughes <johnny@centos.org> 1.0.9-6.el4.centos
- Added CACert.org patch as trusted CA (add_CAcert.org_cert.patch)
- Replaced mozilla-redhat-default-bookmarks.html with
  mozilla-centos-default-bookmarks.html
- Replaced mozilla-redhat-default-prefs.js with mozilla-centos-default-prefs.js

Thu, 18 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-6.el4
- Update to latest snapshot of Mozilla 1.8.0 branch

Wed, 17 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-5.el4
- added pathes for Mozilla bugs 267833,309322,345305,361745,
  362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
  390078,393537,395942,325761,392149

...

seamonkey-nspr - Netscape Portable Runtime

NSPR provides platform independence for non-GUI operating system
facilities. These facilities include threads, thread synchronization,
normal file and network I/O, interval timing and calendar time, basic
memory management (malloc and free) and shared library linking.

Change Log:

Sat, 20 Oct 2007 GMT - Johnny Hughes <johnny@centos.org> 1.0.9-6.el4.centos
- Added CACert.org patch as trusted CA (add_CAcert.org_cert.patch)
- Replaced mozilla-redhat-default-bookmarks.html with
  mozilla-centos-default-bookmarks.html
- Replaced mozilla-redhat-default-prefs.js with mozilla-centos-default-prefs.js

Thu, 18 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-6.el4
- Update to latest snapshot of Mozilla 1.8.0 branch

Wed, 17 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-5.el4
- added pathes for Mozilla bugs 267833,309322,345305,361745,
  362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
  390078,393537,395942,325761,392149

...

seamonkey-nspr-devel - Development Libraries for the Netscape Portable Runtime

Header files for doing development with the Netscape Portable Runtime.

Change Log:

Sat, 20 Oct 2007 GMT - Johnny Hughes <johnny@centos.org> 1.0.9-6.el4.centos
- Added CACert.org patch as trusted CA (add_CAcert.org_cert.patch)
- Replaced mozilla-redhat-default-bookmarks.html with
  mozilla-centos-default-bookmarks.html
- Replaced mozilla-redhat-default-prefs.js with mozilla-centos-default-prefs.js

Thu, 18 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-6.el4
- Update to latest snapshot of Mozilla 1.8.0 branch

Wed, 17 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-5.el4
- added pathes for Mozilla bugs 267833,309322,345305,361745,
  362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
  390078,393537,395942,325761,392149

...

seamonkey-nss - Network Security Services

Network Security Services (NSS) is a set of libraries designed to
support cross-platform development of security-enabled server
applications. Applications built with NSS can support SSL v2 and v3,
TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3
certificates, and other security standards.

Change Log:

Sat, 20 Oct 2007 GMT - Johnny Hughes <johnny@centos.org> 1.0.9-6.el4.centos
- Added CACert.org patch as trusted CA (add_CAcert.org_cert.patch)
- Replaced mozilla-redhat-default-bookmarks.html with
  mozilla-centos-default-bookmarks.html
- Replaced mozilla-redhat-default-prefs.js with mozilla-centos-default-prefs.js

Thu, 18 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-6.el4
- Update to latest snapshot of Mozilla 1.8.0 branch

Wed, 17 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-5.el4
- added pathes for Mozilla bugs 267833,309322,345305,361745,
  362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
  390078,393537,395942,325761,392149

...

seamonkey-nss-devel - Development Libraries for Network Security Services

Header files to doing development with Network Security Services.

Change Log:

Sat, 20 Oct 2007 GMT - Johnny Hughes <johnny@centos.org> 1.0.9-6.el4.centos
- Added CACert.org patch as trusted CA (add_CAcert.org_cert.patch)
- Replaced mozilla-redhat-default-bookmarks.html with
  mozilla-centos-default-bookmarks.html
- Replaced mozilla-redhat-default-prefs.js with mozilla-centos-default-prefs.js

Thu, 18 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-6.el4
- Update to latest snapshot of Mozilla 1.8.0 branch

Wed, 17 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.0.9-5.el4
- added pathes for Mozilla bugs 267833,309322,345305,361745,
  362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
  390078,393537,395942,325761,392149

...

kdebase-devel - Development files for kdebase

Header files for developing applications using kdebase.
Install kdebase-devel if you want to develop or compile Konqueror,
Kate plugins or KWin styles.

Change Log:

Fri, 21 Sep 2007 GMT - Than Ngo <than@redhat.com> - 6:3.3.1-6.l4
- Resolves: #290851,
  CVE-2007-4569, kdm password-less login vulnerability
  CVE-2007-3820, CVE-2007-4224 CVE-2007-4225, Konqueror address bar spoofing

Mon, 11 Jun 2007 GMT - Than Ngo <than@redhat.com> - 6:3.3.1-5.19.rhel4
- Resolves: bz#243620, KDE flash player workaround, CVE-2007-2022

Mon, 29 Jan 2007 GMT - Than Ngo <than@redhat.com> - 6:3.3.1-5.18.rhel4
- add missing Buildreq on lm_sensors-devel

...

kernel-doc - Various documentation bits found in the kernel source.

This package contains documentation files from the kernel
source. Various bits of information about the Linux kernel and the
device drivers shipped with it are documented in these files.

You'll want to install this package if you need a reference to the
options that can be passed to Linux kernel modules at load time.

Change Log:

Mon, 12 Nov 2007 GMT - Johnny Hughes <johnny@centos.org> [2.6.9-55.0.12]
- rolled in standard centos changes (build for i586, change genkey to
  genkey.centos, do not terminate build on extra files).

Wed, 17 Oct 2007 GMT - Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-55.0.12]
- update: deadlock from recursive call through netpoll_send_skb (Neil Horman) [328351]
- fix machine check errors with Clovertown G0-step CPU (Geoff Gustafson) [320791]
- fix disable block layer bouncing for most memory on 64bit systems (Jim Paradis) [330111]

Fri, 12 Oct 2007 GMT - Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-55.0.11]
- fix denial of service with wedged processes (Vitaly Mayatskikh) [302931] {CVE-2006-6921}
- fix stack growing into hugetlb reserved regions (Vitaly Mayatskikh) [294971] {CVE-2007-3739}
- fix creating of RHEL4u5 guest domain on i686 RHEL-5.1 host (Chris Lalancette) [251013]
- fix memory leak in __bio_map_user (Eric Sandeen) [328371]
- fix deadlock from recursive call through netpoll_send_skb (Neil Horman) [328351]
- fix ALSA memory disclosure flaw (Vitaly Mayatskikh) [297741] {CVE-2007-4571}
- fix missing ioctl() permission checks in aacraid driver (Vitaly Mayatskikh) [298341] {CVE-2007-4308}
- fix VFAT compat ioctls DoS on 64-bit (Eric Sandeen) [253316] {CVE-2007-2878}

...

gimp-devel - GIMP plugin and extension development kit

The gimp-devel package contains the static libraries and header files
for writing GNU Image Manipulation Program (GIMP) plug-ins and
extensions.

Change Log:

Mon, 17 Sep 2007 GMT - Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.7.el4
- validate bytesperline header field when loading PCX files (#247571)

Tue, 11 Sep 2007 GMT - Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.6.el4
- replace gimp_error() by gimp_message()/gimp_quit() in a few plugins so they
  don't crash but gracefully exit when encountering error conditions
- fix endianness issues in the PSP plugin to avoid it doing (seemingly) endless
  loops when loading images
- fix endianness issues in the PCX plugin which cause it to not detect corrupt
  images

Fri, 13 Jul 2007 GMT - Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.5.el4
- add safeguard to avoid crashes while loading corrupt PSD images (#247571,
  patch by Raphaël Quinet)

...

gimp - The GNU Image Manipulation Program

The GIMP (GNU Image Manipulation Program) is a powerful image
composition and editing program, which can be extremely useful for
creating logos and other graphics for webpages. The GIMP has many of
the tools and filters you would expect to find in similar commercial
offerings, and some interesting extras as well. The GIMP provides a
large image manipulation toolbox, including channel operations and
layers, effects, sub-pixel imaging and anti-aliasing, and conversions,
all with multi-level undo.

The GIMP includes a scripting facility, but many of the included
scripts rely on fonts that we cannot distribute. The GIMP FTP site
has a package of fonts that you can install by yourself, which
includes all the fonts needed to run the included scripts. Some of
the fonts have unusual licensing requirements; all the licenses are
documented in the package. Get
ftp://ftp.gimp.org/pub/gimp/fonts/freefonts-0.10.tar.gz and
ftp://ftp.gimp.org/pub/gimp/fonts/sharefonts-0.10.tar.gz if you are so
inclined.  Alternatively, choose fonts which exist on your system
before running the scripts.

Change Log:

Mon, 17 Sep 2007 GMT - Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.7.el4
- validate bytesperline header field when loading PCX files (#247571)

Tue, 11 Sep 2007 GMT - Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.6.el4
- replace gimp_error() by gimp_message()/gimp_quit() in a few plugins so they
  don't crash but gracefully exit when encountering error conditions
- fix endianness issues in the PSP plugin to avoid it doing (seemingly) endless
  loops when loading images
- fix endianness issues in the PCX plugin which cause it to not detect corrupt
  images

Fri, 13 Jul 2007 GMT - Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.5.el4
- add safeguard to avoid crashes while loading corrupt PSD images (#247571,
  patch by Raphaël Quinet)

...

gpdf - viewer for Portable Document Format (PDF) files for GNOME

This is GPdf, a viewer for Portable Document Format (PDF) files for
GNOME. GPdf is based on the Xpdf program and uses additional GNOME
libraries for better desktop integration.

GPdf includes the gpdf application, a Bonobo control for PDF display
which can be embedded in Nautilus, and a Nautilus property page for
PDF files.

Change Log:

Wed, 31 Oct 2007 GMT - Kristian Høgsberg <krh@redhat.com> - 2.8.2-7.7.1
- Bump release.

Tue, 30 Oct 2007 GMT - Kristian Høgsberg <krh@redhat.com> - 2.8.2-7.4.3
- Fix a couple of typos in the patch for (#356641).

Tue, 30 Oct 2007 GMT - Kristian Høgsberg <krh@redhat.com> - 2.8.2-7.4.2
- Add patch to fix CVE-2007-4352, CVE-2007-5392, and CVE-2007-5393 (#356641).

...

cups-libs - Common Unix Printing System - libraries

The Common UNIX Printing System provides a portable printing layer for
UNIX® operating systems. It has been developed by Easy Software Products
to promote a standard printing solution for all UNIX vendors and users.
CUPS provides the System V and Berkeley command-line interfaces.
The cups-libs package provides libraries used by applications to use CUPS
natively, without needing the lp/lpr commands.

Change Log:

Tue, 30 Oct 2007 GMT - Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.20.2:.2
- Applied patch to fix CVE-2007-4351 (STR #2561, bug #356551).

Tue, 30 Oct 2007 GMT - Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.20.2:.1
- Applied patch to fix CVE-2007-4045 (bug #356551).
- Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
  CVE-2007-5393 (bug #356551).

Wed, 18 Jul 2007 GMT - Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.20.2
- Better patch for CVE-2007-3387 (bug #248220).

...

cups-devel - Common Unix Printing System - development environment

The Common UNIX Printing System provides a portable printing layer for
UNIX® operating systems. This is the development package for creating
additional printer drivers, and other CUPS services.

Change Log:

Tue, 30 Oct 2007 GMT - Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.20.2:.2
- Applied patch to fix CVE-2007-4351 (STR #2561, bug #356551).

Tue, 30 Oct 2007 GMT - Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.20.2:.1
- Applied patch to fix CVE-2007-4045 (bug #356551).
- Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
  CVE-2007-5393 (bug #356551).

Wed, 18 Jul 2007 GMT - Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.20.2
- Better patch for CVE-2007-3387 (bug #248220).

...

kdelibs-devel - Header files and documentation for compiling KDE applications.

This package includes the header files you will need to compile
applications for KDE.  Also included is the KDE API documentation in HTML
format for easy browsing.

Change Log:

Wed, 19 Sep 2007 GMT - Than Ngo <than@redhat.com> - 6:3.3.1-9.el4
- Resolves: bz293551,  CVE-2007-0537 CVE-2007-1564

Mon, 17 Sep 2007 GMT - Than Ngo <than@redhat.com> - 6:3.3.1-8.el4
- resolves: #293401, CVE-2007-3820 CVE-2007-4224 CVE-2007-4225

Tue, 08 May 2007 GMT - Than Ngo <than@redhat.com> - 6:3.3.1-7.RHEL4
- Resolves: #293881, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242
- Resolves: #293551, Konqueror improper HTML comment rendering, CVE-2007-0537

...

cups - Common Unix Printing System

The Common UNIX Printing System provides a portable printing layer for
UNIX® operating systems. It has been developed by Easy Software Products
to promote a standard printing solution for all UNIX vendors and users.
CUPS provides the System V and Berkeley command-line interfaces.

Change Log:

Tue, 30 Oct 2007 GMT - Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.20.2:.2
- Applied patch to fix CVE-2007-4351 (STR #2561, bug #356551).

Tue, 30 Oct 2007 GMT - Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.20.2:.1
- Applied patch to fix CVE-2007-4045 (bug #356551).
- Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
  CVE-2007-5393 (bug #356551).

Wed, 18 Jul 2007 GMT - Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.20.2
- Better patch for CVE-2007-3387 (bug #248220).

...

xpdf - A PDF file viewer for the X Window System.

Xpdf is an X Window System based viewer for Portable Document Format
(PDF) files. Xpdf is a small and efficient program which uses
standard X fonts.

Change Log:

Wed, 31 Oct 2007 GMT - Than Ngo <than@redhat.com> - 1:3.00-14.el4
- Resolves: #356811, CVE-2007-4352 CVE-2007-5392 CVE-2007-5393

Wed, 18 Jul 2007 GMT - Than Ngo <than@redhat.com> 1:3.00-12.RHEL4
- Resolves: bz#248199, CVE-2007-3387 xpdf integer overflow

Mon, 06 Feb 2006 GMT - Than Ngo <than@redhat.com> 1:3.00-11.12
- apply official patch to fix buffer overflow issue in the xpdf codebase
  when handling splash images CVE-2006-0301 (#179046)

...

thunderbird - Mozilla Thunderbird mail/newsgroup client

Mozilla Thunderbird is a standalone mail and newsgroup client.

Change Log:

Sat, 20 Oct 2007 GMT - Johnny Hughes <johnny@centos.org> - 1.5.0.12-0.5.el4.centos
- changed thunderbird-redhat-default-prefs.js to thunderbird-centos-default-prefs.js
- added add_CAcert.org_cert.patch

Thu, 18 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.5.0.12-0.5.el3
- Update to latest snapshot of Mozilla 1.8.0 branch

Wed, 17 Oct 2007 GMT - Martin Stransky <stransky@redhat.com> - 1.5.0.12-0.4.el3
- added pathes for Mozilla bugs 199088,267833,309322,345305,361745,
  362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
  390078,393537,395942,325761,392149

...

kdelibs - K Desktop Environment - Libraries

Libraries for the K Desktop Environment:
KDE Libraries included: kdecore (KDE core library), kdeui (user interface),
kfm (file manager), khtmlw (HTML widget), kio (Input/Output, networking),
kspell (spelling checker), jscript (javascript), kab (addressbook),
kimgio (image manipulation).

Change Log:

Wed, 19 Sep 2007 GMT - Than Ngo <than@redhat.com> - 6:3.3.1-9.el4
- Resolves: bz293551,  CVE-2007-0537 CVE-2007-1564

Mon, 17 Sep 2007 GMT - Than Ngo <than@redhat.com> - 6:3.3.1-8.el4
- resolves: #293401, CVE-2007-3820 CVE-2007-4224 CVE-2007-4225

Tue, 08 May 2007 GMT - Than Ngo <than@redhat.com> - 6:3.3.1-7.RHEL4
- Resolves: #293881, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242
- Resolves: #293551, Konqueror improper HTML comment rendering, CVE-2007-0537

...