[El-errata] ELSA-2012-0451 Important: Oracle Linux 6 rpm security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2012-0451

https://rhn.redhat.com/errata/RHSA-2012-0451.html

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
rpm-4.8.0-19.el6_2.1.i686.rpm
rpm-apidocs-4.8.0-19.el6_2.1.noarch.rpm
rpm-build-4.8.0-19.el6_2.1.i686.rpm
rpm-cron-4.8.0-19.el6_2.1.noarch.rpm
rpm-devel-4.8.0-19.el6_2.1.i686.rpm
rpm-libs-4.8.0-19.el6_2.1.i686.rpm
rpm-python-4.8.0-19.el6_2.1.i686.rpm

x86_64:
rpm-4.8.0-19.el6_2.1.x86_64.rpm
rpm-apidocs-4.8.0-19.el6_2.1.noarch.rpm
rpm-build-4.8.0-19.el6_2.1.x86_64.rpm
rpm-cron-4.8.0-19.el6_2.1.noarch.rpm
rpm-devel-4.8.0-19.el6_2.1.i686.rpm
rpm-devel-4.8.0-19.el6_2.1.x86_64.rpm
rpm-libs-4.8.0-19.el6_2.1.i686.rpm
rpm-libs-4.8.0-19.el6_2.1.x86_64.rpm
rpm-python-4.8.0-19.el6_2.1.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/rpm-4.8.0-19.el6_2.1.src.rpm


Description of changes:

[4.8.0-19.1]
- Proper region tag validation on package/header read (CVE-2012-0060)
- Double-check region size against header size (CVE-2012-0061)
- Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)