Monday's security updates

Arch Linux has updated qt5-webengine (multiple vulnerabilities).

CentOS has updated firefox (C7; C6; C5: multiple vulnerabilities).

Debian has updated php5 (unknown), samba (multiple vulnerabilities), tomcat7 (multiple vulnerabilities), and tomcat8 (multiple vulnerabilities).

Debian-LTS has updated game-music-emu (multiple vulnerabilities), icedove (multiple vulnerabilities), libupnp (code execution), libupnp4 (code execution), most (command execution), nagios3 (two vulnerabilities), php5 (multiple vulnerabilities), tomcat6 (privilege escalation), tomcat6 (regression in previous update), and tomcat7 (privilege escalation).

Fedora has updated firefox (F23: denial of service), gd (F24: three vulnerabilities), golang (F23: denial of service), kernel (F25; F24: out of bounds stack read), perl-DBD-MySQL (F23: two vulnerabilities), unzip (F25; F24: buffer overflows), and xen (F23: multiple vulnerabilities).

openSUSE has updated firefox (42.2, 42.1, 13.2: multiple vulnerabilities), gc (13.2: code execution), and lxc (42.2, 42.1, 13.2: directory traversal).

SUSE has updated kernel (SLE12-SP1: two vulnerabilities) and xen (SLE11-SP4: multiple vulnerabilities).

Ubuntu has updated apt (16.10: regression in previous update).

Comments (none posted)