Friday's security updates CentOS has updated setroubleshoot (C6; C7: privilege escalation).
Debian has updated batik
(information leak).
Fedora has updated dokuwiki (F20; F21; F22: access control bypass), drupal7 (F22: multiple vulnerabilities), drupal7-views (F20; F21:
multiple vulnerabilities),
ettercap (F20; F21: multiple vulnerabilities), mingw-xerces-c (F22: denial of service), nx-libs (F20; F21: multiple vulnerabilities),
php (F22: multiple vulnerabilities), and xerces-c (F22: denial of service).
Mandriva has updated cabextract (BS1,2: multiple vulnerabilities), cpio (BS1: multiple vulnerabilities; BS2: directory traversal),
e2fsprogs (BS1; BS2: multiple vulnerabilities), and openssl (BS1; BS2: multiple vulnerabilities).
openSUSE has updated libXfont (13.1, 13.2: multiple vulnerabilities), libzip (13.1, 13.2: denial of service), and tcpdump (13.1, 13.2: multiple vulnerabilities).
Oracle has updated ipa and
slapi-nis (O7: multiple vulnerabilities), kernel (O7: multiple vulnerabilities), and
setroubleshoot (O5; O6; O7: privilege escalation).
Red Hat has updated ipa,
slapi-nis (RHEL7: multiple vulnerabilities), kernel (RHEL7: multiple vulnerabilities), kernel-rt (RHEL7: multiple vulnerabilities), and setroubleshoot (RHEL5,6,7: privilege escalation).
Scientific Linux has updated ipa
and slapi-nis (SL7:), kernel (SL7:
multiple vulnerabilities),
and setroubleshoot (SL5,6,7: privilege escalation).
SUSE has updated Xen (SLE12:
multiple vulnerabilities).