Security advisories for Monday CentOS has updated mod_wsgi (C7:
privilege escalation).
Debian has updated mediawiki (two vulnerabilities) and python-django (multiple vulnerabilities).
Fedora has updated file (F20:
denial of service), fish (F20; F19: multiple vulnerabilities), libserf (F20: information leak), pen (F20: unspecified vulnerability),
php-htmlpurifier-htmlpurifier (F20;
F19: "Hash Length Extension" attack), phpMyAdmin (F20: multiple vulnerabilities), ppp (F20: privilege escalation),
rubygem-activerecord (F20; F19: SQL injection), struts (F20: code execution), wordpress (F19: multiple vulnerabilities), and xen (F20; F19: denial of service).
Mageia has updated ansible (MG4:
multiple vulnerabilities), bugzilla (cross-site request forgery), busybox (denial of service/possible code execution), jakarta-commons-httpclient (MG4; MG3: SSL server spoofing), and mednafen (denial of service/possible code execution).
openSUSE has updated IPython
(13.1, 12.3: code execution), libgcrypt
(13.1, 12.3: side-channel attack), and libserf,
subversion (13.1, 12.3: multiple vulnerabilities).
Oracle has updated mod_wsgi (OL7:
privilege escalation).
Red Hat has updated mod_wsgi
(RHEL7: privilege escalation).