Security advisories for Wednesday

[Posted July 9, 2014 by ris]

CentOS has updated lzo (C6: code execution).

Debian has updated php5 (multiple vulnerabilities).

Fedora has updated owncloud (F20: undisclosed vulnerability), python-django-evolution (F20; F19: incompatible versions), ReviewBoard (F20; F19: incompatible versions), and samba (F19: multiple vulnerabilities).

Gentoo has updated adobe-flash (multiple vulnerabilities).

Mageia has updated dpkg (multiple vulnerabilities), freerdp (two vulnerabilities), gd (denial of service), liblzo (code execution), php (MG4; MG3: multiple vulnerabilities), python (two vulnerabilities), and python-simplejson (missing boundary check).

Mandriva has updated ffmpeg (BS1.0: multiple vulnerabilities), file (BS1.0: multiple vulnerabilities), gnupg (BS1.0: denial of service), iodine (BS1.0: authentication bypass), libxfont (BS1.0: multiple vulnerabilities), php (BS1.0: multiple vulnerabilities), and phpmyadmin (BS1.0: multiple cross-site scripting vulnerabilities).

openSUSE has updated kernel (11.4: privilege escalation).

Oracle has updated lzo (OL6: code execution).

Red Hat has updated cumin (MRG for RHEL6; MRG for RHEL5: two vulnerabilities).

Ubuntu has updated dbus (14.04, 13.10, 12.04: multiple denial of service flaws).