Security advisories for Monday

[Posted March 21, 2016 by ris]

Security advisories for Monday

[Security] Posted Mar 21, 2016 17:27 UTC (Mon) by ris

Arch Linux has updated git (code execution) and thunderbird (multiple vulnerabilities).

Debian has updated activemq (unsafe deserialization), git (code execution), icedove (multiple vulnerabilities), iceweasel (multiple vulnerabilities), and squid3 (denial of service).

Fedora has updated drupal6-emfield (F23; F22: access bypass), firefox (F23: multiple vulnerabilities), git (F23: code execution), libotr (F23; F22: code execution), libvpx (F23: code execution), mod_auth_mellon (F23: denial of service), proftpd (F23; F22: weak key usage), webkitgtk3 (F23: multiple vulnerabilities), websvn (F23; F22: cross-site scripting), and xen (F23; F22: multiple vulnerabilities).

Gentoo has updated openssl (multiple vulnerabilities).

openSUSE has updated bind (13.2; 13.1; 11.4: two vulnerabilities), bsh2 (13.2: code execution), cgit (13.1; 11.4: code execution), Chromium (13.1: multiple vulnerabilities), git (13.1; 11.4: code execution), and rubygem-actionpack-3_2 (13.2: two vulnerabilities).

SUSE has updated bind (SLE11-SP2,3,4: two vulnerabilities), firefox (SLES10-SP4: multiple vulnerabilities), samba (SLE11-SP4: privilege escalation), tomcat (SLES12: multiple vulnerabilities), and tomcat6 (SLES11-SP4: multiple vulnerabilities).

Comments (none posted)