Security advisories for Monday

Debian has updated firebird2.1 (code execution), firebird2.5 (code execution/denial of service), typo3-src (multiple vulnerabilities), lighttpd (symlink attack), libvirt-bin (unintended write access), and libvirt (fixes a regression in previous update).

Fedora has updated icu (F18; F17: race condition), bugzilla (F18; F17: cross-site scripting), kernel (F18: multiple vulnerabilities), sudo (F18: privilege escalation), tor (F18: denial of service), krb5 (F17: denial of service), yum (F17: denial of service).

Mageia has updated git (information disclosure), ruby (denial of service), firefox, thunderbird (code execution), perl (denial of service), poppler (multiple vulnerabilities), telepathy-gabble (denial of service), stunnel (code execution), and flash-player-plugin (multiple vulnerabilities).

Mandriva has updated sudo (privilege escalation), clamav (multiple vulnerabilities), and nagios (code execution).

openSUSE has updated systemtap (denial of service).

Slackware has updated ruby (denial of service).

SUSE has updated IBM java6 (SLE 11 SP1; SLE 11 SP2: multiple vulnerabilities), IBM Java5 (SLE 10 SP4; SUSE Core 9: multiple vulnerabilities), and firefox (SLE 11 SP2; SLE 10 SP4: code execution).

Ubuntu has updated apache2 (multiple vulnerabilities) and pam-xdg-support (privilege escalation).

Comments (none posted)