Security advisories for Monday

Debian has updated getmail4 (multiple vulnerabilities) and icedove (multiple vulnerabilities).

Fedora has updated arm-none-eabi-binutils-cs (F20; F19: multiple vulnerabilities), avr-binutils (F20; F19: multiple vulnerabilities), firefox (F19: multiple vulnerabilities), flac (F20: multiple vulnerabilities), graphviz (F20; F19: format string vulnerability), hivex (F20; F19: invalid hive files), kwebkitpart (F20; F19: code execution), libksba (F20; F19: denial of service), nrpe (F19: code execution), readline (F19: insecure temporary files), and thunderbird (F19: multiple vulnerabilities).

Mageia has updated apache-mod_wsgi (privilege escalation), jasper (code execution), and openvpn (denial of service).

openSUSE has updated apache2-mod_wsgi (13.1, 12.3: privilege escalation), docker (13.2: privilege escalation), firefox (13.2, 13.1, 12.3: multiple vulnerabilities), flac (13.2, 13.1, 12.3: multiple vulnerabilities), icecast (13.2; 13.1, 12.3: information leak/privilege escalation), openvpn (13.2, 13.1, 12.3: denial of service), and ruby19 (13.1, 12.3: two vulnerabilities).

Oracle has updated docker (OL7; OL6: privilege escalation).

Scientific Linux has updated kernel (SL5: restriction bypass).

SUSE has updated clamav (SLE11 SP3; SLES11 SP1,2: multiple vulnerabilities).

Ubuntu has updated ghostscript (10.04: code execution) and jasper (14.10, 14.04, 12.04: code execution).

Comments (none posted)