Friday's security advisories

CentOS has updated freetype (C5; C6: code execution), nss (C5: certificate removal), nspr (C6: certificate removal), mingw-libxml2 (C6: multiple vulnerabilities), xorg-x11-drv-qxl (C6: denial of service), mysql (C6: multiple unspecified vulnerabilities), libreport (C6: two privilege escalation flaws), and abrt (C6: two privilege escalation flaws).

Fedora has updated jakarta-commons-httpclient (F16; F17; F18: incorrect certificate validation), coreutils (multiple vulnerabilities), ettercap (F16; F18: code execution), ndjbdns (F16; F17; F18: ghost domain attack), thunderbird (F16: multiple vulnerabilities), and axis (F17; F18: incorrect certificate validation).

Mandriva has updated freetype2 (two vulnerabilities).

Oracle has updated mingw-libxml2 (OL6: multiple vulnerabilities), nss, nss-util, and nspr (OL6: certificate removal), freetype (OL5; OL6: code execution), xorg-x11-drv-qxl (OL6: denial of service), abrt and libreport (OL6: two privilege escalation flaws), mysql (OL6: multiple unspecified vulnerabilities), and nss and nspr (OL5: certificate removal).

Red Hat has updated nss, nss-util, and nspr (RHEL6: certificate removal), nss and nspr (RHEL5: certificate removal), abrt and libreport (RHEL6: two privilege escalation flaws), freetype (RHEL5&6: code execution), mingw-libxml2 (RHEL6: multiple vulnerabilities), xorg-x11-drv-qxl (RHEL6: denial of service), and mysql (RHEL6: multiple unspecified vulnerabilities).

Scientific Linux has updated xorg-x11-drv-qxl (SL6: denial of service), mysql (SL6: multiple unspecified vulnerabilities), mingw-libxml2 (SL6: multiple vulnerabilities), abrt and libreport (SL6: two privilege escalation flaws), nss and nspr (SL5: certificate removal), nss, nss-util, and nspr (SL6: certificate removal), and freetype (SL5&6: code execution).

Ubuntu has updated kernel (12.10: regression in previous security fix), OMAP4 kernel (12.10: regression in previous security fix), kernel (12.04: regression in previous security fix), OMAP4 kernel (12.04: regression in previous security fix), and Quantal kernel (12.04: regression in previous security fix).