Security updates for Wednesday

[Posted January 4, 2017 by ris]

Security updates for Wednesday

[Security] Posted Jan 4, 2017 17:15 UTC (Wed) by ris

Arch Linux has updated lib32-curl (two vulnerabilities), lib32-libcurl-compat (two vulnerabilities), lib32-libcurl-gnutls (two vulnerabilities), libcurl-compat (two vulnerabilities), libcurl-gnutls (two vulnerabilities), and pcsclite (privilege escalation).

CentOS has updated ghostscript (C7; C6: multiple vulnerabilities).

Debian has updated libphp-phpmailer (regression in previous update).

Debian-LTS has updated libphp-phpmailer (code execution) and libvncserver (two vulnerabilities).

Fedora has updated borgbackup (F25; F24: two vulnerabilities) and freeipa (F24: two vulnerabilities).

Gentoo has updated firefox (multiple vulnerabilities).

Mageia has updated kernel-linus (multiple vulnerabilities), kernel-tmb (multiple vulnerabilities), libupnp (code execution), and python-html5lib (cross-site scripting).

openSUSE has updated dnsmasq (42.2, 42.1: denial of service), samba (42.2; 42.1: three vulnerabilities), and wget (42.2, 42.1: race condition).

Red Hat has updated ghostscript (RHEL7; RHEL6: multiple vulnerabilities), kernel (RHEL7.1: denial of service), and systemd (RHEL7.1: denial of service).

Scientific Linux has updated ghostscript (SL7; SL6: multiple vulnerabilities) and ipa (SL7: two vulnerabilities).

Comments (none posted)