LWN.net Logo

Wednesday's security updates

Wednesday's security updates
[Security] Posted Feb 22, 2012 19:02 UTC (Wed) by corbet

CentOS has updated cvs (C6: command execution via hostile proxy server), libxml2 (C6: denial of service), and libpng (C6: code execution).

Debian has updated libmodplug (six code-execution vulnerabilities).

Fedora has updated java-1.6.0-openjdk (F15: nine CVE numbers), firefox (F15: code execution), xulrunner (F15: code execution) and thunderbird (F15: code execution).

Mandriva has updated libxml2 (denial of service) and libpng (code execution).

Oracle has updated libxml2 (EL6: denial of service) and cvs (EL6: command execution).

Red Hat has updated libxml2 (RHEL5-6: denial of service), httpd (RHEL5: multiple vulnerabilities) java-1.6.0-openjdk (RHEL5: nine CVE numbers), and cvs (RHEL5-6: code execution via hostile proxy server).

Ubuntu has updated cvs (command execution via hostile proxy server).

Comments (none posted)

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds