Wednesday's security updates

There is not much happening in the Linux world, but the security updates never seem to take a holiday. In particular, we're seeing the nasty telnetd hole showing up in some Linux distributions; anybody running a vulnerable version would be well advised to update immediately - or to move away from telnet altogether.

CentOS has updated krb5 (C4, C5: telnetd remote root vulnerability) and krb5-appl (C6: telnetd remote root vulnerability).

Mandriva has updated ipmitool (denial of service) and krb5-appl (telnetd remote root vulnerability).

Oracle has updated UE kernel (EL5, EL6: privilege escalation), kernel (EL6: privilege escalation), krb5 (EL4, EL5: telnetd remote root vulnerability), and krb5-appl (EL6: telnetd remote root vulnerability).

Red Hat has updated krb5 (RHEL3,RHEL5: telnetd remote root vulnerability) and krb5-appl (RHEL6: telnetd remote root vulnerability).

Scientific Linux has updated krb5 (SL4-5: telnetd remote root vulnerability).

Comments (1 posted)