Monday's security updates

[Posted December 28, 2015 by ris]

Monday's security updates

[Security] Posted Dec 28, 2015 18:28 UTC (Mon) by ris

Arch Linux has updated mediawiki (multiple vulnerabilities), nghttp2 (code execution), and thunderbird (multiple vulnerabilities).

Debian-LTS has updated cacti (SQL injection), libpng (multiple vulnerabilities), and libxml2 (multiple vulnerabilities).

Fedora has updated activemq (F23: unsafe deserialization), openstack-swift-plugin-swift3 (F23: replay attack), and samba (F22: multiple vulnerabilities).

openSUSE has updated bind (13.2, 13.1; Leap42.1: denial of service), cups-filters (13.2: command execution), ffmpeg (Leap42.1: multiple vulnerabilities), grub2 (13.2, 13.1: code execution), gummi (Leap42.1, 13.2, 13.1: predictable filenames in /tmp), krb5 (Leap42.1: memory corruption regression), libxml2 (13.2, 13.1: multiple vulnerabilities), polarssl (13.2: code execution), Qt (Leap42.1: multiple vulnerabilities), subversion (13.2, 13.1: (code execution), subversion (Leap42.1: three vulnerabilities), and xulrunner (Leap42.1: multiple vulnerabilities).

SUSE has updated bind (SLE12-SP1: denial of service).

Comments (none posted)