Tuesday's security updates

[Posted January 6, 2015 by ris]

Tuesday's security updates

[Security] Posted Jan 6, 2015 19:14 UTC (Tue) by ris

CentOS has updated libvirt (C7: information disclosure).

Debian has updated libevent (denial of service).

Fedora has updated bind (F21; F19: denial of service), cpio (F20: denial of service), jasper (F21; F20; F19: three code execution vulnerabilities), python-pip (F21: denial of service), python3 (F19: two vulnerabilities), and roundcubemail (F21; F20: cross-site scripting).

Mageia has updated libvirt (denial of service), openvas-manager (sql injection), privoxy (two vulnerabilities), and python-yaml (denial of service).

Oracle has updated libvirt (OL7: information disclosure).

Red Hat has updated kernel (RHEL4: privilege escalation) and libvirt (RHEL7: information disclosure).

Scientific Linux has updated libvirt (SL7: information disclosure).

SUSE has updated bind (SLE11 SP3: denial of service), mutt (SLE12: denial of service), and suseRegister (SLE11 SP3: man-in-the-middle attack).

Ubuntu has updated cgmanager (14.10, 14.04: information disclosure).

Comments (none posted)