Security updates for Friday

[Posted February 10, 2017 by jake]

Security updates for Friday

[Security] Posted Feb 10, 2017 17:51 UTC (Fri) by jake

Arch Linux has updated bind (denial of service).

Debian has updated jasper (multiple vulnerabilities).

Debian-LTS has updated mysql-5.5 (code execution) and viewvc (cross-site scripting).

Fedora has updated bitlbee (F24: denial of service), gnome-boxes (F24: password disclosure), gtk-vnc (F25: two vulnerabilities), iio-sensor-proxy (F24: authentication bypass), java-1.8.0-openjdk-aarch32 (F25; F24: multiple vulnerabilities), libwmf (F25: multiple vulnerabilities), mariadb (F24: multiple vulnerabilities), openssl (F24: three vulnerabilities), quagga (F25: denial of service), spice (F25; F24: two vulnerabilities), viewvc (F24: cross-site scripting), and wireshark (F25: two denial of service flaws).

Gentoo has updated firejail (incomplete fix for previous vulnerability).

SUSE has updated opus (SLE12: code execution) and kernel (SLE11: multiple vulnerabilities).

Ubuntu has updated linux-raspi2 (16.10: multiple vulnerabilities), linux-ti-omap4 (12.04: two vulnerabilities), and nova-lxd (16.04: ).

Comments (none posted)