Security advisories for Monday

[Posted September 22, 2014 by ris]

Security advisories for Monday

[Security] Posted Sep 22, 2014 15:58 UTC (Mon) by ris

Debian has updated mantis (SQL injection flaws) and nginx (virtual host confusion attacks).

Gentoo has updated adobe-flash (multiple vulnerabilities), c-icap (denial of service), chromium (denial of service), and libxml2 (denial of service).

Mageia has updated flash-player-plugin (multiple vulnerabilities), gnupg (MG3: side-channel attack), phpmyadmin (privilege escalation), and zarafa (multiple vulnerabilities).

Mandriva has updated gnupg (side-channel attack).

openSUSE has updated ntp (11.4: denial of service), chromium (13.1, 12.3: multiple vulnerabilities), and phpMyAdmin (13.1, 12.3: privilege escalation).

Red Hat has updated qemu-kvm-rhev (RHEL OSP5.0: multiple vulnerabilities).

SUSE has updated dbus-1 (SLE11 SP3: denial of service).

Ubuntu has updated nss (CA certificate update).

Comments (none posted)