Security advisories for Friday

[Posted December 9, 2016 by jake]

Security advisories for Friday

[Security] Posted Dec 9, 2016 16:26 UTC (Fri) by jake

Arch Linux has updated jasper (multiple vulnerabilities, two from 2015) and linux-zen (code execution).

Debian-LTS has updated roundcube (code execution) and spip (cross-site scripting).

Fedora has updated httpd (F25: denial of service).

Mageia has updated phpmyadmin (multiple vulnerabilities).

openSUSE has updated GraphicsMagick (42.2: multiple vulnerabilities, many from 2014), kernel (13.2: multiple vulnerabilities, two from 2015), and libXfixes (13.2: denial of service).

Red Hat has updated python-XStatic-jquery-ui (RHOSP 9.0; RHOSP 8.0: cross-site scripting), rh-mariadb100-mariadb (RHSC: multiple vulnerabilities), and rh-mariadb101-mariadb (RHSC: multiple vulnerabilities).

SUSE has updated kernel (SLE12: three vulnerabilities).

Ubuntu has updated oxide-qt (16.10, 16.04, 14.04: multiple vulnerabilities).

Comments (none posted)