Thursday's security advisories

[Posted May 19, 2016 by jake]

Arch Linux has updated p7zip (two code execution flaws).

Debian has updated swift-plugin-s3 (replay attack).

Debian-LTS has updated icedove (armhf: three vulnerabilities), nss (multiple vulnerabilities), and phpmyadmin (multiple vulnerabilities).

Mageia has updated cacti (two SQL injection flaws), chromium-browser-stable (multiple vulnerabilities), dosfstools (two vulnerabilities), libarchive (code execution), libksba (three vulnerabilities), libndp (man-in-the-middle attacks), mariadb (multiple vulnerabilities), moodle (multiple vulnerabilities), qemu (multiple vulnerabilities), and xymon (multiple vulnerabilities).

openSUSE has updated php5 (13.2: multiple vulnerabilities).

SUSE has updated firefox (SLE10: multiple vulnerabilities).

Ubuntu has updated firefox (fix to previous security update), oxide-qt (16.04, 15.10, 14.04: multiple vulnerabilities), and thunderbird (multiple vulnerabilities).