Friday's security updates

n8willis

from LWN.net on 2015-04-17 16:13 (#78X2)

Arch Linux has updated php (multiple vulnerabilities).

Debian-LTS has updated tzdata (unspecified vulnerability).

Gentoo has updated adobe-flash (multiple vulnerabilities) and xorg-server (multiple vulnerabilities).

openSUSE has updated icecast(13.1, 13.2:denial of service) and ntop (13.1, 13.2: cross-site scripting).

Red Hat has updated java-1.8.0-oracle (RHEL6,7: multiple vulnerabilities), novnc (RHEL6 OSP; RHEL7 OSP: VNC session hijacking),openstack-foreman-installer (RHEL6OSP: root command execution),openstack-glance (RHEL6 OSP; RHEL7 OSP: denial of service),openstack-nova (RHEL6 OSP; RHEL7 OSP: multiple vulnerabilities), openstack-packstack, openstack-puppet-modules (RHEL6 OSP; RHEL7 OSP: root command execution),openstack-swift (RHEL6 OSP; RHEL7 OSP: metadata constraint bypass),python-django-horizon, python-django-openstack-auth (RHEL6 OSP; RHEL7 OSP: denial of service), andredhat-access-plugin-openstack (RHEL6 OSP; RHEL7 OSP: information disclosure).

Ubuntu has updated apport(14.04, 14.10: privilege escalation).