Security advisories for Monday

Debian has updated pidgin (remote code execution).

Mageia has updated libtiff (code execution), socat (code execution), backuppc (cross-site scripting), pidgin-otr (code execution), mplayer (multiple vulnerabilities), clamav (multiple vulnerabilities), openssh (denial of service) and ffmpeg (M1; M2: multiple vulnerabilities).

Scientific Linux has updated SL6: selinux-policy (updated policy), SL6: libtiff (code execution), SL6: postgresql, postgresql84 (multiple vulnerabilities), SL6: 389-ds-base (plain text password disclosure), SL6: sblim-cim-client2 (predictable hash collisions), SL6: nss, nss-util, nspr (multiple vulnerabilities), SL6: sos (privilege escalation), SL6: php (multiple vulnerabilities), SL6: xorg-x11-server (xserver locking vulnerabilities), SL6: cifs-utils (file existence disclosure flaw), SL6: openldap (denial of service), SL6: openssh (denial of service), SL6: qt (multiple vulnerabilities), SL6: net-snmp (denial of service), SL6: mysql (temporary denial of service), SL6: abrt, libreport, btparser, python-meh (information disclosure), SL6: 389-ds-base (denial of service), SL6: php-pecl-apc (cross-site scripting), SL6: busybox (code execution), SL6: rsyslog (denial of service), SL6: libguestfs (unintended file access) and SL6: libvirt (unintended access to USB devices).

Ubuntu has updated 11.10 OMAP kernel (denial of service).

Comments (none posted)