Tuesday's security advisories

[Posted February 2, 2016 by ris]

Arch Linux has updated curl (authentication bypass), lib32-curl (authentication bypass), python-django (permission bypass), and python2-django: permission bypass).

Fedora has updated bind (F22: two denial of service flaws), chrony (F22: packet modification), curl (F22: authentication bypass), firefox (F22: multiple vulnerabilities), and qemu (F22: multiple vulnerabilities).

openSUSE has updated firefox (13.1: multiple vulnerabilities), privoxy (Leap42.1, 13.2; 13.1: two denial of service flaws), seamonkey (Leap42.1, 13.2; 13.1: multiple vulnerabilities), firefox (Leap42.1, 13.2: multiple vulnerabilities), and xulrunner (Leap42.1: code execution).

Red Hat has updated java-1.6.0-ibm (RHEL5,6: multiple vulnerabilities), java-1.7.0-ibm (RHEL5: multiple vulnerabilities), java-1.7.1-ibm (RHEL6,7: multiple vulnerabilities), java-1.8.0-ibm (RHEL7: multiple vulnerabilities), and redis (RHELOSP7-OT; RHELOSP7; RHELOSP6: denial of service).

Ubuntu has updated kernel (15.10; 15.04; 14.04; 12.04: multiple vulnerabilities), linux-lts-trusty (12.04: multiple vulnerabilities), linux-lts-utopic (14.04: multiple vulnerabilities), linux-lts-vivid (14.04: multiple vulnerabilities), linux-lts-wily (14.04: multiple vulnerabilities), linux-raspi2 (15.10: multiple vulnerabilities), linux-ti-omap4 (12.04: multiple vulnerabilities), openjdk-6 (12.04: multiple vulnerabilities), and openjdk-7 (15.10, 15.04, 14.04: multiple vulnerabilities).