Security advisories for Monday

[Posted May 4, 2015 by ris]

Security advisories for Monday

[Security] Posted May 4, 2015 16:42 UTC (Mon) by ris

Arch Linux has updated clamav (multiple vulnerabilities) and squid (certificate validation bypass).

Debian has updated jqueryui (cross-site scripting), libphp-snoopy (command execution), libxml-libxml-perl (information disclosure), owncloud (multiple vulnerabilities), ruby1.8 (man-in-the-middle attack), ruby1.9.1 (man-in-the-middle attack), and ruby2.1 (man-in-the-middle attack).

Debian-LTS has updated xorg-server (denial of service).

Fedora has updated clamav (F21: multiple vulnerabilities), curl (F21: multiple vulnerabilities), ikiwiki (F21; F20: cross-site scripting), mingw-libtiff (F21: two vulnerabilities), proftpd (F20: unauthenticated copying of files), qt3 (F21; F20: code execution), and xen (F21; F20: information leak).

Mageia has updated 389-ds-base (access control bypass), cherokee (authentication bypass), chromium-browser-stable (multiple vulnerabilities), curl (multiple vulnerabilities), directfb (two vulnerabilities), fcgi (denial of service), python-pip (two vulnerabilities), ruby (man-in-the-middle attack), and subversion (multiple vulnerabilities).

Mandriva has updated curl (MBS2.0; MBS1.0: multiple vulnerabilities).

Comments (none posted)