Tuesday's security advisories

Debian has updated dovecot (denial of service).

Fedora has updated check-mk (F20; F19: file disclosure), cifs-utils (F19: code execution), cups-filters (F19: command execution), gnutls (F19: code execution), libgadu (F19: code execution), libpng (F19: denial of service), libtasn1 (F19: multiple vulnerabilities), libtiff (F19: code execution), mediawiki (F20; F19: don't parse usernames as wikitext), mingw-curl (F20; F19: multiple vulnerabilities), mingw-freetype (F20; F19: two vulnerabilities), mingw-gnutls (F20; F19: code execution), mingw-icu (F20; F19: denial of service), mingw-libgcrypt (F19: information leak), mingw-libjpeg-turbo (F20; F19: information leak), mingw-libpng (F19: multiple vulnerabilities), mingw-libtiff (F20; F19: multiple vulnerabilities), mingw-pixman (F20; F19: denial of service), mingw-readline (F20; F19: insecure temporary files), openssh (F19: two vulnerabilities), qemu (F20: multiple vulnerabilities), and qt3 (F20; F19: denial of service).

Gentoo has updated adobe-flash (multiple vulnerabilities).

Mandriva has updated curl (multiple vulnerabilities), file (denial of service), gnutls (BS 1.0; ES 5.0: code execution), libcap-ng (privilege escalation), libtasn1 (multiple vulnerabilities), openssl (ES 5.0; BS 1.0: multiple vulnerabilities), otrs (cross-site scripting), php (denial of service), python-django (ES 5.0; BS 1.0: multiple vulnerabilities), and squid (denial of service).

Slackware has updated php (multiple vulnerabilities).

Ubuntu has updated dpkg (two file modification via path traversal flaws) and libxml2 (regression in previous update).

Comments (none posted)