Friday's security updates

[Posted January 22, 2016 by jake]

Friday's security updates

[Security] Posted Jan 22, 2016 17:32 UTC (Fri) by jake

CentOS has updated java-1.7.0-openjdk (C7; C6; C5: multiple vulnerabilities) and java-1.8.0-openjdk (C7; C6: multiple vulnerabilities).

Debian has updated fuse (privilege escalation).

Fedora has updated libsndfile (F22: two vulnerabilities), python-rsa (F23: signature forgery), and rsync (F22: file overwrite from 2014).

Mageia has updated dhcpcd (denial of service).

openSUSE has updated bind (42.1; 13.2: denial of service), cgit (42.1, 13.2: three vulnerabilities), giflib (13.2: code execution), and libxml2 (42.1: denial of service).

Oracle has updated java-1.7.0-openjdk (OL7; OL6; OL5: multiple vulnerabilities) and java-1.8.0-openjdk (OL6: multiple vulnerabilities).

Scientific Linux has updated java-1.7.0-openjdk (SL6; SL5&7: multiple vulnerabilities) and java-1.8.0-openjdk (SL7: multiple vulnerabilities).

Ubuntu has updated perl (15.10, 15.04: taint botch) and rsync (file overwrite from 2014).

Comments (none posted)