Security updates for Monday

Arch Linux has updated firefox (same-origin restriction bypass) and nghttp2 (denial of service).

Debian has updated iceweasel (denial of service), postgresql-9.1 (three vulnerabilities), and postgresql-9.4 (two vulnerabilities).

Debian-LTS has updated chrony (packet modification) and cpio (out-of-bounds write).

Fedora has updated firefox (F23: denial of service), krb5 (F22: three vulnerabilities), mingw-gnutls (F23: improper cryptographic calculations), mingw-nettle (F23: improper cryptographic calculations), nodejs (F23: two vulnerabilities), php (F23; F22: multiple vulnerabilities), and wordpress (F23; F22: two vulnerabilities).

Comments (none posted)