CentOS Errata and Security Advisory 2009:0136
https://rhn.redhat.com/errata/RHSA-2008-0136.html
The following updated files have been uploaded and are currently syncing to the mirrors:
i386: tk-8.4.13-5.el5_1.1.i386.rpm tk-devel-8.4.13-5.el5_1.1.i386.rpm
src: tk-8.4.13-5.el5_1.1.src.rpm