Security updates for Friday

[Posted August 12, 2016 by jake]

Security updates for Friday

[Security] Posted Aug 12, 2016 17:07 UTC (Fri) by jake

CentOS has updated mariadb (C7: multiple unspecified vulnerabilities), php (C7; C6: proxy injection), and qemu-kvm (C7: two vulnerabilities).

Debian has updated icedove (multiple vulnerabilities) and postgresql-9.4 (two vulnerabilities).

Debian-LTS has updated nettle (?:).

Fedora has updated perl-DBD-MySQL (F23: code execution from 2015), python (F24: proxy injection), and python3 (F24: proxy injection).

openSUSE has updated go (42.1, 13.2; SPH: denial of service), hawk2 (42.1: clickjacking prevention), java-1_7_0-openjdk (42.1; 13.2: multiple vulnerabilities), java-1_8_0-openjdk (42.1: multiple vulnerabilities), libarchive (42.1: multiple vulnerabilities, many from 2015), OpenJDK7 (13.1: multiple vulnerabilities), pcre2 (42.1: code execution), sqlite3 (42.1: information leak), and wget (13.2: code execution).

Oracle has updated mariadb (OL7: multiple unspecified vulnerabilities), php (OL7; OL6: proxy injection), and qemu-kvm (OL7: two vulnerabilities).

Red Hat has updated mariadb (RHEL7: multiple unspecified vulnerabilities), mariadb55-mariadb (RHSC: multiple unspecified vulnerabilities), php (RHEL7; RHEL6: proxy injection), php54-php (RHSC: proxy injection), php55-php (RHSC: proxy injection), qemu-kvm (RHEL7: two vulnerabilities), Red Hat OpenShift Enterprise (two vulnerabilities), rh-mariadb100-mariadb (RHSC: multiple unspecified vulnerabilities), rh-mysql56-mysql (RHSC: multiple unspecified vulnerabilities), and rh-php56-php (RHSC: proxy injection).

Comments (none posted)