Friday's security updates

[Posted April 24, 2015 by n8willis]

Friday's security updates

[Security] Posted Apr 24, 2015 14:59 UTC (Fri) by n8willis

Arch Linux has updated powerdns (denial of service) and powerdns-recursor (denial of service).

Debian-LTS has updated subversion (multiple vulnerabilities).

Fedora has updated lcms (F20: denial of service) and php (F21: multiple vulnerabilities).

Mageia has updated chromium-browser-stable (M4: multiple vulnerabilities), chrony (M4: multiple vulnerabilities), lftp (M4: SSL server spoofing), libksba (M4: denial of service), ntop (M4: cross-site scripting), setup (M4: information disclosure), and t1utils (M4: multiple vulnerabilities).

openSUSE has updated firefox (13.1; 13.2: code execution) and socat (13.1: denial of service).

Oracle has updated kernel (kernel 3.8.18 (O6, O7); kernel 2.6.39 (O5, O6); kernel 2.6.32 (O5, O6): multiple vulnerabilities).

Red Hat has updated novnc (RHEL OSP4: VNC session hijacking).

Ubuntu has updated firefox (code execution), usb-creator (12.04, 14.04, 14.10; 15.04: privilege escalation), and wpa_supplicant (14.04, 14.10: code execution).

Comments (none posted)