Security updates for Monday

[Posted February 1, 2016 by ris]

Security updates for Monday

[Security] Posted Feb 1, 2016 18:28 UTC (Mon) by ris

CentOS has updated qemu-kvm (C7; C6: code execution).

Debian has updated freetype (denial of service), privoxy (two denial of service flaws), prosody (insecure handling of dialback keys), radicale (two vulnerabilities), and rails (multiple vulnerabilities).

Debian-LTS has updated gosa (code injection), mysql-5.5 (multiple vulnerabilities), phpmyadmin (two vulnerabilities), prosody (two vulnerabilities), and tiff (multiple vulnerabilities).

Fedora has updated curl (F23: authentication bypass), firefox (F23: multiple vulnerabilities), gsi-openssh (F22: multiple vulnerabilities), imlib2 (F23: denial of service), kernel (F23; F22: multiple vulnerabilities), krb5 (F23: three vulnerabilities), moodle (F23; F22: two vulnerabilities), nginx (F23: multiple vulnerabilities), ntp (F23: multiple vulnerabilities), openssl (F23: two vulnerabilities), phpMyAdmin (F22: multiple vulnerabilities), privoxy (F23; F22: two denial of service flaws), webkitgtk4 (F22: multiple vulnerabilities), and xen (F22: multiple vulnerabilities).

Gentoo has updated openssl (multiple vulnerabilities).

openSUSE has updated ecryptfs-utils (Leap42.1; 13.1: two vulnerabilities), giflib (Leap42.1: heap-based buffer overflow), and kernel (13.1: multiple vulnerabilities).

Comments (none posted)