Security advisories for Wednesday Arch Linux has updated libssh (insecure ssh sessions).
Debian has updated libssh
(multiple vulnerabilities), lighttpd (padding-oracle attack), and websvn (cross-site scripting).
Debian-LTS has updated nss
(cryptographic weakness) and websvn (cross-site scripting).
Fedora has updated botan (F23:
three vulnerabilities), code-editor (F23:
three vulnerabilities), gdl (F22:
out-of-bounds read flaw), GraphicsMagick
(F22: out-of-bounds read flaw), monotone
(F23: three vulnerabilities), octave (F22:
out-of-bounds read flaw), postgresql (F23:
denial of service), qca (F23: three
vulnerabilities), qt-creator (F23: three
vulnerabilities), vdr-skinenigmang (F22:
out-of-bounds read flaw), vdr-skinnopacity
(F22: out-of-bounds read flaw), and vdr-tvguide (F22: out-of-bounds read flaw).
openSUSE has updated firefox
(13.1: same-origin restriction bypass).
Red Hat has updated rh-ror41
(RHSCL: multiple vulnerabilities).
Slackware has updated bind
(denial of service), glibc (code
execution), libgcrypt (two vulnerabilities), and ntp (multiple vulnerabilities).
SUSE has updated firefox
(SLE12-SP1: denial of service) and postgresql94 (SLE12-SP1: three
vulnerabilities, one from 2007).