Buried in security updates

Gentoo has updated ktorrent (multiple vulnerabilities), freetype (integer overflow), quagga (denial of service), mod_perl (denial of service), and tomcat (information disclosure).

Mandriva has updated ktorrent (directory traversal).

Red Hat has updated w3c-libwww (buffer overflows), unzip (multiple vulnerabilities), gcc (directory traversal in fastjar), gdb (buffer overflows), util-linux (access policy bypass), busybox (weak password generation), cpio (buffer overflow on 64-bit platforms), sendmail (configuration error allowing message spoofing), openssh (plaintext hostnames in known_hosts files - from 2005), shadow-utils (random permissions on new user mailboxes), gdm (race condition), and openldap (access permissions bypass). All of these updates are for RHEL4. Also updated is xscreensaver (password check bypass - for RHEL 2.1 through RHEL4).

rPath has updated the kernel (IPv6 source routing vulnerability).

Ubuntu has updated net-snmp (denial of service).