Security updates for Wednesday [LWN.net]

Dist.	ID	Release	Package	Date
Arch Linux	ASA-202001-4		thunderbird	2020-01-14
CentOS	CESA-2020:0086	C6	firefox	2020-01-14
CentOS	CESA-2020:0085	C7	firefox	2020-01-15
openSUSE	openSUSE-SU-2020:0055-1	15.1	GraphicsMagick	2020-01-15
openSUSE	openSUSE-SU-2020:0053-1		chromium	2020-01-14
openSUSE	openSUSE-SU-2020:0060-1	15.1	firefox	2020-01-15
openSUSE	openSUSE-SU-2020:0051-1	15.1	log4j	2020-01-14
openSUSE	openSUSE-SU-2020:0059-1	15.1	nodejs8	2020-01-15
openSUSE	openSUSE-SU-2020:0056-1		phpMyAdmin	2020-01-14
openSUSE	openSUSE-SU-2020:0057-1	15.1	singularity	2020-01-14
openSUSE	openSUSE-SU-2020:0058-1	15.1	virglrenderer	2020-01-15
Oracle	ELSA-2020-5512	OL5	kernel	2020-01-15
Oracle	ELSA-2020-5512	OL6	kernel	2020-01-15
Red Hat	RHSA-2020:0111-01	EL8	firefox	2020-01-14
SUSE	SUSE-SU-2020:0102-1	SLE12	man	2020-01-14
SUSE	SUSE-SU-2020:0104-1	SLE15	nodejs10	2020-01-15
SUSE	SUSE-SU-2020:0099-1	SLE12	openssl-1_1	2020-01-14
SUSE	SUSE-SU-2020:0101-1	SLE15	php7	2020-01-15
Ubuntu	USN-4239-1	12.04 14.04 16.04 18.04 19.04 19.10	php5, php7.0, php7.2, php7.3	2020-01-15
Ubuntu	USN-4237-2	12.04 14.04	spamassassin	2020-01-15

to post comments

Security updates for Wednesday

Posted Jan 15, 2020 21:47 UTC (Wed) by timo_s (guest, #112870) [Link]

I'm somewhat concerned that it took the openSUSE folks one week to push an update for a critical zero-day vulnerability in Firefox for openSUSE Leap. Mozilla published the vulnerability and the update on Jan 8. SUSE patched Firefox in their enterprise distribution SLED, which Leap is supposed to track, on Jan 10. By that time many other distributions had released an update as well, yet it took another five days for the fix to land in Leap. Is Leap lagging behind so much in general or was that just an outlier?