Fedora has updated rekonq (F13, F12: cross-site scripting), sssd (F13, F12: authentication bypass), wireshark (F13, F12: multiple vulnerabilities), and F12: kernel (privilege escalation).
Gentoo has updated wxgtk (arbitrary code execution).
Mandriva has updated wget (code execution).
Pardus has updated openssl (denial of service) and flashplugin (multiple vulnerabilities).
Red Hat has updated kernel (privilege escalation).
SUSE has updated kernel (multiple vulnerabilities).
Mandriva has updated thunderbird (multiple vulnerabilities).
Ubuntu has updated wget (arbitrary code execution).
Debian has updated wireshark (arbitrary code execution).
Fedora has updated socat (F13, F12: arbitrary code execution).
Mandriva has updated libgdiplus (arbitrary code execution), perl-libwww-perl (unexpected download filename), and openssl (denial of service).
openSUSE has updated acroread (multiple vulnerabilities).
SUSE has updated kernel (multiple vulnerabilities) and acroread (multiple vulnerabilities).
Fedora has updated bogofilter (F13, F12: denial of service) and php-pear-cas (F13, F12: multiple vulnerabilities).
Mandriva has updated libhx (arbitrary code execution).
Ubuntu has updated bogofilter (denial of service) and libwww-perl (unexpected download filename).
Many have criticized syslog-ng, a replacement for the syslog logging daemon with many additional features, for not being open enough. Syslog-ng has a closed-source commercial version and keeps the entire code base under a single copyright by requiring copyright transfer for contributions, which has been a sore spot in the eyes of many people. This may be part of the cause for syslog-ng failing to become the default system-logging daemon of modern Linux distributions. Now the project seeks to relieve these concerns and attract a wider contributor base with a new licensing model. Subscribers can click below for the full article from this week's Development page.