Security advisories for Wednesday

CentOS has updated qemu-kvm (privilege escalation).

Fedora has updated file-roller (F18: path traversal), kernel (F18: denial of service), libkdcraw (F18; F19: code execution), libzrtpcpp (F18; F17: multiple vulnerabilities), ortp (F18; F17: multiple vulnerabilities), and twinkle (F18; F17: multiple vulnerabilities). Today's update to Fedora 18 libkdcraw triggered a mass "security" update to over one hundred KDE packages, all pointing to, but not affected by, the libraw security issue.

Mandriva has updated libxml2 (denial of service).

openSUSE has updated java-1_6_0-openjdk (multiple vulnerabilities), libxml2 (denial of service), php5 (multiple vulnerabilities), and python-django (multiple vulnerabilities).

Red Hat has updated ruby193-ruby (SSL server spoofing).

SUSE has updated java-1_6_0-openjdk (multiple vulnerabilities).