Wednesday's security updates

CentOS has updated libvorbis (C3, C5: input validation flaw) and pidgin (C3, C5: remote code execution).

Debian has updated kdegraphics (two code-execution vulnerabilities), kdelibs (three code-execution vulnerabilities), and kde4libs (ditto).

Gentoo has updated subversion (remotely exploitable integer and buffer overflows), cdf (buffer overflows), (Perl) Compress::Raw (denial of service), dhcpd (denial of service), dokuwiki (file inclusion), and dillo (integer overflow).

Mandriva has updated wget (certificate spoofing).

Red Hat has updated pidgin (remote code execution) and libvorbis (input validation flaw).

rPath has updated subversion (buffer overflow), apr (remote code execution), and kernel (null pointer dereference).

Slackware has updated kernel (null pointer dereference).

Ubuntu has updated kernel (null pointer dereference) and apache2 (fix for regression in previous update).

Comments (none posted)