Security updates for Thursday

Debian has updated libvncserver (two vulnerabilities) and pcsc-lite (privilege escalation).

Debian-LTS has updated python-crypto (DLA-773-3; DLA-773-2: regression(s?) in previous security update for CVE-2013-7459).

Fedora has updated bzip2 (F24: denial of service), libpng (F24: denial of service), and seamonkey (F24: multiple vulnerabilities).

openSUSE has updated ImageMagick (42.2, 42.1: multiple vulnerabilities), libgme (42.2, 42.1: multiple vulnerabilities), and thunderbird (13.1: multiple vulnerabilities).

Oracle has updated ghostscript (OL7; OL6: multiple vulnerabilities, one from 2013), gstreamer-plugins-bad-free (OL7: three vulnerabilities), gstreamer-plugins-good (OL7: multiple vulnerabilities), gstreamer1-plugins-bad-free (OL7: multiple vulnerabilities), and gstreamer1-plugins-good (OL7: multiple vulnerabilities).

Red Hat has updated gstreamer-plugins-bad-free (RHEL7: three vulnerabilities), gstreamer-plugins-good (RHEL7: multiple vulnerabilities), gstreamer1-plugins-bad-free (RHEL7: multiple vulnerabilities), and gstreamer1-plugins-good (RHEL7: multiple vulnerabilities).

Scientific Linux has updated gstreamer-plugins-bad-free (SL7: three vulnerabilities), gstreamer-plugins-good (SL7: multiple vulnerabilities), gstreamer1-plugins-bad-free (SL7: multiple vulnerabilities), and gstreamer1-plugins-good (SL7: multiple vulnerabilities).

Ubuntu has updated nss (three vulnerabilities).

Comments (none posted)