Security advisories for Monday
Security advisories for Monday
Arch Linux has updated gd (code execution), latex2rtf (code execution), mencoder (denial of service), mercurial (two vulnerabilities), and mplayer (denial of service).
CentOS has updated openssl (C7: multiple vulnerabilities).
Debian has updated ikiwiki (cross-site scripting).
Debian-LTS has updated file (buffer over-write), mercurial (code execution), and nagios3 (denial of service, from 2014).
Fedora has updated firefox (F22: multiple vulnerabilities), kernel (F22: multiple vulnerabilities), libecap (F22: multiple vulnerabilities), openvas-cli (F22: cross-site scripting), openvas-gsa (F22: cross-site scripting), openvas-libraries (F22: cross-site scripting), openvas-manager (F22: cross-site scripting), openvas-scanner (F22: cross-site scripting), perl (F22: denial of service), quassel (F23; F22: denial of service), and squid (F22: multiple vulnerabilities).
Mageia has updated openssl (multiple vulnerabilities) and vlc (multiple vulnerabilities).
openSUSE has updated ImageMagick (Leap42.1; 13.2: multiple vulnerabilities), java-1_7_0-openjdk (Leap42.1: multiple vulnerabilities), java-1_8_0-openjdk (Leap42.1: multiple vulnerabilities), and subversion (Leap42.1; 13.2: two vulnerabilities).
Oracle has updated openssl (OL7: multiple vulnerabilities).
Red Hat has updated java-1.6.0-openjdk (RHEL5,6,7: multiple vulnerabilities) and openssl (RHEL7: multiple vulnerabilities).
Scientific Linux has updated java-1.6.0-openjdk (SL5,6,7: multiple vulnerabilities) and openssl (SL7: multiple vulnerabilities).
SUSE has updated compat-openssl098 (SLE12-SP1: multiple vulnerabilities), firefox (SLE12-SP1: multiple vulnerabilities), and ImageMagick (SLE12-SP1: multiple vulnerabilities).
Ubuntu has updated kernel (16.04: multiple vulnerabilities), linux-lts-xenial (14.04: multiple vulnerabilities), linux-raspi2 (16.04: multiple vulnerabilities), and linux-snapdragon (16.04: multiple vulnerabilities).