Wednesday's security updates

[Posted April 20, 2011 by corbet]

Wednesday's security updates

[Security] Posted Apr 20, 2011 17:39 UTC (Wed) by corbet

CentOS has updated conga (C5: remote privilege escalation).

Debian has updated libmojolicious-perl (directory traversal) and request-tracker (multiple vulnerabilities).

Fedora has updated libtiff (F14: code execution bug with 2009 CVE number) and kdelibs (F13: web site spoofing).

Mandriva has updated kdelibs4 (web site spoofing).

Red Hat has updated polkit (local privilege escalation).

Slackware has updated polkit (local privilege escalation).

Ubuntu has updated openslp (denial of service), policykit (local privilege escalation), krb5 ("denial of service" - though the CVE entry says that code execution is possible as well), language-selector (local privilege escalation), and dhcp3 (remote root command execution).

Comments (none posted)