Security advisories for Monday

Arch Linux has updated haproxy (information leak) and openssh (restriction bypass).

Debian has updated haproxy (information leak) and iceweasel (multiple vulnerabilities).

Debian-LTS has updated aptdaemon (information leak) and virtualbox-ose (multiple vulnerabilities).

Fedora has updated ansible (F22; F21: two vulnerabilities), mariadb (F22: man-in-the-middle attack), pam (F21: denial of service), and trafficserver (F22; F21: several vulnerabilities).

Gentoo has updated chrony (multiple vulnerabilities).

Mageia has updated chromium-browser (MG4,5: multiple vulnerabilities), coreutils (MG4: memory handling error), curl (MG5: information disclosure), filezilla (MG4,5: cipher-downgrade attacks), firefox (MG4,5: multiple vulnerabilities), libwmf (MG4,5: multiple vulnerabilities), mysql-connector-java (MG4: information disclosure), owncloud-client (MG4,5: man-in-the-middle attack), pam (MG4,5: denial of service), pcre (MG5: information leak), php (MG4: multiple vulnerabilities), polkit (MG4,5: multiple vulnerabilities), tidy (MG4: buffer overflow), and wireshark (MG5: denial of service).

openSUSE has updated php5 (13.2, 13.1: multiple vulnerabilities) and phpMyAdmin (13.2, 13.1: three vulnerabilities).

Scientific Linux has updated firefox (SL5,6,7: multiple vulnerabilities).

SUSE has updated OpenSSL (SLE11SP3; SLED11SP3, SLES10SP4; SLES11SP2; SLES10SP4: multiple vulnerabilities).

Ubuntu has updated cups-filters (15.04, 14.10, 14.04, 12.04: code execution) and php5 (15.04, 14.10, 14.04, 12.04: multiple vulnerabilities).

Comments (none posted)