logrotate (3.7.8-4ubuntu2.2) lucid-security; urgency=low
* SECURITY UPDATE: arbitrary code execution via shell metacharacters in
log filename
- debian/patches/CVE-2011-1154.patch: improve shred logic in
logrotate.c.
- CVE-2011-1154
* SECURITY UPDATE: denial of service via
vlc (1.0.6-1ubuntu1.8) lucid-security; urgency=low
* SECURITY UPDATE: Heap overflow in AVI demuxer (LP: #807488)
- debian/patches/CVE-2011-2588.patch: AVI: fix heap buffer overflow,
thanks to RĂ©mi Denis-Courmont
- CVE-2011-2588
- VideoLAN-SA-1106
Date: Mon, 18 Jul 2011