Debian has updated zope-cmfplone (arbitrary code execution), horde3 (multiple vulnerabilities), zope-cmfplone (again, a fix for the previous fix).
Fedora 7 has updated hugin (arbitrary file overwrite via insecure tmpfile creation), tomboy (arbitrary code execution via untrusted library search path), xpdf (multiple vulnerabilities), koffice (multiple vulnerabilities), inotify-tools (arbitrary code execution via buffer overflow), cups (multiple vulnerabilities), mono (arbitrary code execution via buffer overflow), Django (denial of service).
Fedora 8 has updated kdegraphics (arbitrary code execution), xpdf (multiple vulnerabilities), openldap (multiple vulnerabilities), Django (denial of service), koffice (multiple vulnerabilities).
Foresight has updated pcre (multiple arbitrary code execution vulnerabilities), libpng (multiple denial of service vulnerabilities), perl (arbitrary code execution), ImageMagick (multiple arbitrary code execution vulnerabilities), pidgin (denial of service), ruby (insufficient SSL certificate verification), perl (another arbitrary code execution).
Red Hat has updated kdegraphics (RHEL4 and RHEL5) (multiple arbitrary code execution vulnerabilities).
Slackware has updated php (multiple vulnerabilities), php (again, a fix for the previous fix), xpdf, poppler, koffice, kdegraphics (multiple vulnerabilities).
Read full story...