Security updates for Wednesday CentOS has updated
mysql (C5:
multiple vulnerabilities) and
kernel (C5:
multiple vulnerabilities).
Fedora has updated xen (F18;
F17: denial of service), nagios (F18; F17; F16: code execution), moin (F17; F16:
multiple vulnerabilities), rubygem-activerecord (F17; F16:
multiple vulnerabilities), rubygem-activesupport (F17; F16:
multiple vulnerabilities), rubygem-activemodel (F17; F16:
multiple vulnerabilities), rubygem-actionpack (F17; F16:
multiple vulnerabilities), sleuthkit (F18; F17:
evade detection by forensic analysis), qt
(F18: confusing SSL error messages), firefox (F16: multiple vulnerabilities), and
xulrunner (F16: multiple vulnerabilities).
openSUSE has updated flash-player (12.1; 12.1; 11.4:
code execution), flash-player (11.4:
multiple vulnerabilities), gimp (11.4: code
execution), kdelibs (11.4: multiple
vulnerabilities), libssh (11.4: code
execution), mozilla (12.2, 12.1; 11.4: multiple vulnerabilities), xen (11.4: multiple vulnerabilities), mysql-community-server (11.4: code/command
execution), freeradius-server
(authentication bypass), acroread (multiple
vulnerabilities), nagios (code execution),
libqt4 (11.4: multiple vulnerabilities), sblim-cim-client2 (11.4: predictable hash
collisions), otrs (11.4: cross-site
scripting), plib (11.4: multiple
vulnerabilities), tomcat (11.4: multiple
vulnerabilities), opera (11.4: multiple
vulnerabilities), weechat (11.4: multiple
vulnerabilities), wireshark (11.4: multiple
vulnerabilities), libqt4 (12.2; 12.1: information disclosure), libotr (11.4: code execution), mariadb (11.4: code/command execution), gegl (11.4: code execution), tomcat (12.2; 12.1:
multiple vulnerabilities), squid3 (denial
of service), freetype (12.2: multiple
vulnerabilities), bogofilter (11.4: denial
of service), icinga (12.2: code execution),
opera (11.4: multiple vulnerabilities), libreoffice (11.4: code execution), icedtea-web (11.4: code execution), mozilla (11.4: multiple vulnerabilities), horde3-kronolith (11.4: cross-site scripting),
freetype2 (12.1: multiple vulnerabilities),
and libxml2 (11.4: code execution).
Oracle has updated vino (OL6:
multiple vulnerabilities) and mysql (OL5:
multiple vulnerabilities).
Red Hat has updated kernel (RHEL5:
multiple vulnerabilities) and mysql (RHEL5:
multiple vulnerabilities).
Slackware has updated mysql
(multiple vulnerabilities).
SUSE has updated WebYaST
(information disclosure).
Ubuntu has updated firefox (fixes a
regression in previous update).