Linux security Advisories

Several security issues were fixed in Apache Batik.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

It was discovered that there was a potential buffer overflow and denial of service vulnerabilty in the gdhcp client implementation of connman, a command-line network manager designed for use on embedded devices.

Several security issues were fixed in Nanopb.

It was discovered that there was a potential denial-of-service (DoS) attack in the Kamailio SIP telephony server. This was caused by the Kamailio server mishandling INVITE requests with duplicated fields.

Several security issues were fixed in the Linux kernel.

LuaTeX (TeX Live) could be made to run programs as your login if it compiled a specially crafted TeX file.

hawk could be made to crash if it opened a specially crafted file.

nth-check could be made to crash if it opened a specially crafted file.

Jhead could be made to crash if it opened a specially crafted file.

The container bci/openjdk-devel was updated. The following patches have been included in this update:

Multiple vulnerabilities have been found in Apache Tomcat, the worst of which could result in denial of service.

Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could result in arbitrary code execution.

Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which could result in arbitrary code execution.

Multiple vulnerabilities have been found in CGAL, the worst of which could result in arbitrary code execution.

Multiple vulnerabilities have been found in OpenImageIO, the worst of which could result in arbitrary code execution.

Multiple vulnerabilities have been found in WebkitGTK+, the worst of which could result in arbitrary code execution.

Two security issues have been discovered in libssh, a tiny C SSH library, which may allows an remote authenticated user to cause a denial of service or inject arbitrary commands.