Tuesday's security updates

[Posted September 30, 2014 by ris]

CentOS has updated automake (C5: code execution), bash (C5: command execution), bash (C5: two vulnerabilities), bind97 (C5: denial of service), conga (C5: multiple vulnerabilities), krb5 (C5: multiple vulnerabilities), nss (C5: signature forgery), nss, nspr (C5: multiple vulnerabilities), php (C7; C6; C5: multiple vulnerabilities), and xerces-j2 (C7; C6: unspecified vulnerability).

Fedora has updated kernel (F19: multiple vulnerabilities).

Oracle has updated php (OL7; OL6: multiple vulnerabilities) and xerces-j2 (OL7; OL6: unspecified vulnerability).

Red Hat has updated MRG Realtime (RHE MRG: multiple vulnerabilities), php (RHEL7; RHEL5&6: multiple vulnerabilities), and xerces-j2 (RHEL6&7: unspecified vulnerability).

Scientific Linux has updated xerces-j2 (SL6: unspecified vulnerability).

Slackware has updated bash (command execution).

SUSE has updated bash (SLE12; SUSE Manager: multiple vulnerabilities), bash (SLE12: command execution), and mozilla-nss (SLES11 SP1, SLES10 SP3: signature forgery).

Ubuntu has updated libvncserver (14.04, 12.04: multiple vulnerabilities).