Security updates for Monday

CentOS has updated bind (DNSSEC spoofing), squirrelmail (multiple vulnerabilities).

Debian has updated zaptel (arbitrary code execution), lasso (certificate verification bypass), OpenSSL (X.509 certificate verification bypass).

Gentoo has updated NDISwrapper (arbitrary code execution), JHead (multiple vulnerabilities), pdnsb (multiple vulnerabilities), D-Bus (denial of service), Streamripper (multiple vulnerabilities), Tremulous (arbitrary code execution), MPlayer (multiple vulnerabilities).

Mandriva has updated python (multiple vulnerabilities), pam_mount (insecure tmp file usage), bind (DNSSEC spoofing), xterm (arbitrary code execution)

Red Hat has updated squirrelmail (multiple vulnerabilities), avahi (denial of service).

SUSE has updated ethereal/wireshark, mysql, imap, rsyslog, courier-authlib, nfs-utils, libxml2, python, jhead, git, samba, vinagre, opera (lots of different issues).

Ubuntu has updated cups (multiple vulnerabilities).

Comments (none posted)