Security advisories for Wednesday

Arch Linux has updated mupdf (denial of service).

Debian has updated libarchive (multiple vulnerabilities) and tryton-server (two vulnerabilities).

Debian-LTS has updated tiff (multiple vulnerabilities).

Fedora has updated krb5 (F23: denial of service).

Mageia has updated bsdiff (denial of service), ctdb (privilege escalation), curl (three vulnerabilities), fontconfig (privilege escalation), gnupg/libgcrypt (flawed random number generation), kernel-linus (multiple vulnerabilities), kernel-tmb (multiple vulnerabilities), mupdf (denial of service), nettle/nettle2.7 (information leak), openssh (three vulnerabilities), php (multiple vulnerabilities), phpmyadmin (multiple vulnerabilities), postgresql (two vulnerabilities), and python-django (cross-site scripting).

openSUSE has updated libqt4 (Leap42.1: unsafe SSL ciphers).

Red Hat has updated rh-postgresql94-postgresql (RHSCL: two vulnerabilities).

SUSE has updated firefox (SLE11-SP4: multiple vulnerabilities).

Ubuntu has updated linux-lts-xenial (14.04: multiple vulnerabilities), linux-raspi2 (16.04: multiple vulnerabilities), and linux-snapdragon (16.04: multiple vulnerabilities).

Comments (none posted)