Monday's security updates

Arch Linux has updated libgit2 (multiple vulnerabilities), nginx (privilege escalation), nginx-mainline (privilege escalation), and wordpress (multiple vulnerabilities).

Debian has updated icoutils (three vulnerabilities), pdns (multiple vulnerabilities), pdns-recursor (denial of service), python-bottle (regression in previous update), and tiff (multiple vulnerabilities).

Debian-LTS has updated botan1.10 (integer overflow), gcc-mozilla (update to GCC 4.8), icedove (multiple vulnerabilities), libx11 (denial of service), otrs2 (code execution), python-bottle (regression in previous update), wireless-regdb (radio regulations updates), and xen (two vulnerabilities).

Fedora has updated bind (F25: three denial of service flaws), bind99 (F25: three denial of service flaws), ca-certificates (F25; F24: certificate update), docker-latest (F25: privilege escalation), gnutls (F24: multiple vulnerabilities), libgit2 (F25: multiple vulnerabilities), and onionshare (F25; F24: file injection).

Gentoo has updated apache (multiple vulnerabilities, one from 2014).

Mageia has updated golang (denial of service) and irssi (multiple vulnerabilities).

Red Hat has updated bind (RHEL7; RHEL5,6: denial of service) and bind97 (RHEL5: denial of service).

Scientific Linux has updated java-1.6.0-openjdk (SL5,6,7: multiple vulnerabilities).

SUSE has updated qemu (SLE12-SP2: multiple vulnerabilities).

Comments (none posted)