Tuesday's security updates

CentOS has updated netpbm (C5; C4: multiple vulnerabilities).

Fedora has updated dovecot (F16; F15: certificate validation flaw), F16: ykclient (Authentication bypass via NULL password), F16: pam_yubico (Authentication bypass via NULL password), F16: yubikey-val (Authentication bypass via NULL password), F16: arora (certificate spoof), and krb5 (denial of service).

Mandriva has updated nfs-utils (user-controlled /etc/mtab corruption).

openSUSE has updated dhcp (denial of service).

Red Hat has updated netpbm (multiple vulnerabilities).

Scientific Linux has updated netpbm (multiple vulnerabilities).

SUSE has updated kernel (SLE11 SP1; SLES11 SP1, SLES SP1 VMware, SLE HA 11 SP1, SLED 11 SP1: multiple vulnerabilities).

Ubuntu has updated ec2 kernel (multiple vulnerabilities), fsl-imx51 kernel (multiple vulnerabilities), natty backport kernel (multiple vulnerabilities), marvell dove kernel (multiple vulnerabilities), nova (file overwrite), and omap4 kernel (10.10; 11.04: multiple vulnerabilities).

Comments (none posted)