Thursday's security updates

[Security] Posted Sep 22, 2011 18:11 UTC (Thu) by corbet

CentOS has updated pango (C5: code execution), qt4 (C5: directory traversal, cross-site scripting, and code execution), cyrus-imapd (C5: remote code execution), ecryptfs-utils (C5: multiple vulnerabilities), dovecot (C5: denial of service), firefox (C5: multiple vulnerabilities), dhcp (C5: denial of service), dbus (C5: denial of service), foomatic (C5: code execution), bash (C5: local file overwrite), and kernel (C5: multiple vulnerabilities).

Red Hat has updated frysk (RHEL4: code execution), pango (RHEL5: code execution), evolution28-pango (RHEL4: code execution), qt4 (RHEL5: directory traversal, cross-site scripting, and code execution), qt (RHEL6: directory traversal, cross-site scripting, and code execution) and flash-plugin (RHEL5-6: multiple remote code execution vulnerabilities).

Scientific Linux has updated frysk (SL4: code execution), pango (SL5: code execution), evolution28-pango (SL4: code execution), qt4 (SL5: directory traversal, cross-site scripting, and code execution), and qt (SL6: directory traversal, cross-site scripting, and code execution).

Ubuntu has updated gimp (code execution via malicious GIF image).

Comments (none posted)