Security advisories for Thursday

Arch Linux has updated ruby (code execution).

CentOS has updated bind (C7; C6; C5: denial of service), bind97 (C5: denial of service), and firefox (C7; C6; C5: multiple vulnerabilities).

Debian has updated cacti (SQL injection), gdk-pixbuf (incomplete fix for earlier code execution flaw), grub2 (code execution), iceweasel (multiple vulnerabilities), subversion (code execution), and tryton-server (access check bypass).

Debian-LTS has updated bind9 (denial of service).

Fedora has updated grub2 (F22: code execution), qemu (F23: three vulnerabilities), and xen (F23: multiple vulnerabilities).

Mageia has updated cups-filters (code execution), firefox (multiple vulnerabilities), libpng (two vulnerabilities), potrace (code execution), quassel (denial of service), and redis (denial of service).

openSUSE has updated chromium (42.1, 13.2, 13.1; SPHSLE12: multiple vulnerabilities) and openssl (42.1; 13.2, 13.1: three vulnerabilities).

Oracle has updated bind (OL7; OL6; OL5: denial of service), bind97 (OL5: denial of service), and firefox (OL7; OL6; OL5: multiple vulnerabilities).

Red Hat has updated bind (RHEL6&7; RHEL5: denial of service), bind97 (RHEL5: denial of service), and firefox (multiple vulnerabilities).

Scientific Linux has updated bind (SL5: denial of service) and bind97 (SL5: denial of service).

Ubuntu has updated cups-filters (15.10, 15.04, 14.04: code execution), foomatic-filters (12.04: code execution), kernel (12.04; 14.04; 15.04; 15.10: multiple vulnerabilities), linux-lts-trusty (12.04: three vulnerabilities), linux-lts-utopic (14.04: three vulnerabilities), and linux-lts-vivid (14.04: multiple vulnerabilities).

Comments (2 posted)