CentOS Errata and Security Advisory 2009:0135
https://rhn.redhat.com/errata/RHSA-2008-0135.html
The following updated files have been uploaded and are currently syncing to the mirrors:
i386: tk-8.4.7-3.el4_6.1.i386.rpm tk-devel-8.4.7-3.el4_6.1.i386.rpm
src: tk-8.4.7-3.el4_6.1.src.rpm