Security advisories for Thursday

[Posted August 11, 2016 by jake]

Arch Linux has updated jq (code execution from 2015) and websvn (cross-site scripting).

Debian-LTS has updated postgresql-9.1 (two vulnerabilities).

Gentoo has updated optipng (three vulnerabilities).

openSUSE has updated typo3 (13.1: three vulnerabilities from 2013 and 2014) and firefox, mozilla-nss (13.1: many vulnerabilities).

Red Hat has updated java-1.7.0-ibm (RHEL5: two vulnerabilities), java-1.7.1-ibm (RHEL6&7: two vulnerabilities), java-1.8.0-ibm (RHEL6&7: two vulnerabilities), and python-django (RHOSP8; RHOSP7; RHEL7: cross-site scripting).

Scientific Linux has updated qemu-kvm (SL6: denial of service).

Ubuntu has updated libgd2 (16.04, 14.04: three vulnerabilities) and xmlrpc-epi (16.04: code execution).