| 1 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" |
| 2 | "http://www.w3.org/TR/html4/loose.dtd"> |
| 3 | <html> |
| 4 | <head><title>Security updates for Monday [LWN.net]</title> |
| 5 | <meta name="twitter:card" content="summary" /> |
| 6 | <meta name="twitter:site" content="@lwnnet" /> |
| 7 | <meta name="twitter:title" content="Security updates for Monday" /> |
| 8 | <meta name="twitter:description" content="Security updates have been issued by Debian (dojo, libtirpc, mariadb-10.0, php5, ruby-json-jwt, spice, spice-gtk, tomcat8, and trafficserver), Fedora (ghc-hakyll, ghc-hs-bibutils, ghostscript, mariadb, pandoc-citeproc, phpMyAdmin, and xen), Mageia (java-1.8.0-openjdk, libarchive, libgd, libraw, libxcursor, mariadb, mercurial, openssh, openssl, poppler, quazip, squirrelmail, and virtualbox), openSUSE (cobbler, libressl, wireshark, and zutils), and SUSE (couchdb, java-1_7_0-ibm, java-1_7_1-ibm, OpenStack, and spice). |
| 9 | " /> |
| 10 | <meta name="viewport" content="width=device-width, initial-scale=1"> |
| 11 | <meta HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8"> |
| 12 | <link rel="icon" href="/images/favicon.png" type="image/png"> |
| 13 | <link rel="alternate" type="application/rss+xml" title="LWN.net headlines" href="https://lwn.net/headlines/newrss"> |
| 14 | <link rel="stylesheet" href="/CSS/lwn"> |
| 15 | <link rel="stylesheet" href="/CSS/nosub"> |
| 16 | <link rel="stylesheet" href="/CSS/pure-min"> |
| 17 | <!--[if lte IE 8]> |
| 18 | <link rel="stylesheet" href="/CSS/grids-responsive-old-ie-min"> |
| 19 | <![endif]--> |
| 20 | <!--[if gt IE 8]><!--> |
| 21 | <link rel="stylesheet" href="/CSS/grids-responsive-min"> |
| 22 | <!--<![endif]--> |
| 23 | <link rel="stylesheet" href="/CSS/pure-lwn"> |
| 24 | |
| 25 | |
| 26 | <script type="text/javascript">var p="http",d="static";if(document.location.protocol=="https:"){p+="s";d="engine";}var z=document.createElement("script");z.type="text/javascript";z.async=true;z.src=p+"://"+d+".adzerk.net/ados.js";var s=document.getElementsByTagName("script")[0];s.parentNode.insertBefore(z,s);</script> |
| 27 | <script type="text/javascript"> |
| 28 | var ados_keywords = ados_keywords || []; |
| 29 | if( location.protocol=='https:' ) { |
| 30 | ados_keywords.push('T:SSL'); |
| 31 | } else { |
| 32 | ados_keywords.push('T:HTTP'); |
| 33 | } |
| 34 | |
| 35 | var ados = ados || {}; |
| 36 | ados.run = ados.run || []; |
| 37 | ados.run.push(function() { |
| 38 | |
| 39 | ados_add_placement(4669, 20979, "azk13321_leaderboard", 4).setZone(16026); |
| 40 | |
| 41 | ados_add_placement(4669, 20979, "azk93271_right_zone", [5,10,6]).setZone(16027); |
| 42 | |
| 43 | ados_add_placement(4669, 20979, "azk31017_tracking", 20).setZone(20995); |
| 44 | |
| 45 | |
| 46 | |
| 47 | ados_setKeywords(ados_keywords.join(', ')); |
| 48 | ados_load(); |
| 49 | });</script> |
| 50 | |
| 51 | </head> |
| 52 | <body bgcolor="#ffffff" link="Blue" VLINK="Green" alink="Green"> |
| 53 | <a name="t"></a> |
| 54 | <div id="menu"><a href="/"><img src="https://static.lwn.net/images/logo/barepenguin-70.png" class="logo" |
| 55 | border="0" alt="LWN.net Logo"> |
| 56 | <font class="logo">LWN<br>.net</font> |
| 57 | <font class="logobl">News from the source</font></a> |
| 58 | <a href="/"><img src="https://static.lwn.net/images/lcorner-ss.png" class="sslogo" |
| 59 | border="0" alt="LWN"></a><div class="navmenu-container"> |
| 60 | <ul class="navmenu"> |
| 61 | <li><a class="navmenu" href="#t"><b>Content</b></a><ul><li><a href="/current/">Weekly Edition</a></li><li><a href="/Archives/">Archives</a></li><li><a href="/Search/">Search</a></li><li><a href="/Kernel/">Kernel</a></li><li><a href="/Security/">Security</a></li><li><a href="/Distributions/">Distributions</a></li><li><a href="/Calendar/">Events calendar</a></li><li><a href="/Comments/unread">Unread comments</a></li><li><hr></li><li><a href="/op/FAQ.lwn">LWN FAQ</a></li><li><a href="/op/AuthorGuide.lwn">Write for us</a></li></ul></li> |
| 62 | </ul></div> |
| 63 | </div> <!-- menu --> |
| 64 | <div class="pure-g not-handset" style="margin-left: 10.5em"> |
| 65 | <div class="not-print"> |
| 66 | <div id="azk13321_leaderboard"></div> |
| 67 | </div> |
| 68 | </div> |
| 69 | <div class="topnav-container"> |
| 70 | <div class="not-handset"><form action="https://lwn.net/Login/" method="post" name="loginform" |
| 71 | class="loginform"> |
| 72 | <b>User:</b> <input type="text" name="Username" value="" size="8" /> <b>Password:</b> <input type="password" name="Password" size="8" /> <input type="hidden" name="target" value="/Articles/764046/" /> <input type="submit" name="submit" value="Log in" /></form> | |
| 73 | <form action="https://lwn.net/subscribe/" method="post" class="loginform"> |
| 74 | <input type="submit" name="submit" value="Subscribe" /> |
| 75 | </form> | |
| 76 | <form action="https://lwn.net/Login/newaccount" method="post" class="loginform"> |
| 77 | <input type="submit" name="submit" value="Register" /> |
| 78 | </form> |
| 79 | </div> |
| 80 | <div class="handset-only"> |
| 81 | <a href="/subscribe/"><b>Subscribe</b></a> / |
| 82 | <a href="/Login/"><b>Log in</b></a> / |
| 83 | <a href="/Login/newaccount"><b>New account</b></a> |
| 84 | </div> |
| 85 | </div><div class="pure-grid maincolumn"> |
| 86 | <div class="lwn-u-1 pure-u-md-19-24"> |
| 87 | <div class="PageHeadline"> |
| 88 | <h1>Security updates for Monday</h1> |
| 89 | </div> |
| 90 | <div class="ArticleText"> |
| 91 | <table class="OddEven"> |
| 92 | <tr><th align="left">Dist.</th> |
| 93 | <th align="left">ID</th> |
| 94 | <th align="left">Release</th> |
| 95 | <th align="left">Package</th> |
| 96 | <th align="left">Date</th></tr> |
| 97 | <tr><td align="left">Debian</td> |
| 98 | <td align="left"><a href="https://lwn.net/Articles/764007/">DLA-1492-1</a></td> |
| 99 | <td align="left">LTS</td> |
| 100 | <td align="left">dojo</td> |
| 101 | <td>2018-09-03</td> |
| 102 | </tr><tr><td align="left">Debian</td> |
| 103 | <td align="left"><a href="https://lwn.net/Articles/764008/">DLA-1487-1</a></td> |
| 104 | <td align="left">LTS</td> |
| 105 | <td align="left">libtirpc</td> |
| 106 | <td>2018-08-31</td> |
| 107 | </tr><tr><td align="left">Debian</td> |
| 108 | <td align="left"><a href="https://lwn.net/Articles/764009/">DLA-1488-1</a></td> |
| 109 | <td align="left">LTS</td> |
| 110 | <td align="left">mariadb-10.0</td> |
| 111 | <td>2018-08-31</td> |
| 112 | </tr><tr><td align="left">Debian</td> |
| 113 | <td align="left"><a href="https://lwn.net/Articles/764010/">DLA-1490-1</a></td> |
| 114 | <td align="left">LTS</td> |
| 115 | <td align="left">php5</td> |
| 116 | <td>2018-09-01</td> |
| 117 | </tr><tr><td align="left">Debian</td> |
| 118 | <td align="left"><a href="https://lwn.net/Articles/764011/">DSA-4283-1</a></td> |
| 119 | <td align="left">stable</td> |
| 120 | <td align="left">ruby-json-jwt</td> |
| 121 | <td>2018-08-31</td> |
| 122 | </tr><tr><td align="left">Debian</td> |
| 123 | <td align="left"><a href="https://lwn.net/Articles/764013/">DLA-1488-1</a></td> |
| 124 | <td align="left">LTS</td> |
| 125 | <td align="left">spice</td> |
| 126 | <td>2018-08-31</td> |
| 127 | </tr><tr><td align="left">Debian</td> |
| 128 | <td align="left"><a href="https://lwn.net/Articles/764012/">DLA-1486-1</a></td> |
| 129 | <td align="left">LTS</td> |
| 130 | <td align="left">spice</td> |
| 131 | <td>2018-09-01</td> |
| 132 | </tr><tr><td align="left">Debian</td> |
| 133 | <td align="left"><a href="https://lwn.net/Articles/764014/">DLA-1489-1</a></td> |
| 134 | <td align="left">LTS</td> |
| 135 | <td align="left">spice-gtk</td> |
| 136 | <td>2018-09-01</td> |
| 137 | </tr><tr><td align="left">Debian</td> |
| 138 | <td align="left"><a href="https://lwn.net/Articles/764015/">DLA-1491-1</a></td> |
| 139 | <td align="left">LTS</td> |
| 140 | <td align="left">tomcat8</td> |
| 141 | <td>2018-09-02</td> |
| 142 | </tr><tr><td align="left">Debian</td> |
| 143 | <td align="left"><a href="https://lwn.net/Articles/764016/">DSA-4282-1</a></td> |
| 144 | <td align="left">stable</td> |
| 145 | <td align="left">trafficserver</td> |
| 146 | <td>2018-08-31</td> |
| 147 | </tr><tr><td align="left">Fedora</td> |
| 148 | <td align="left"><a href="https://lwn.net/Articles/764017/">FEDORA-2018-33fef25ed1</a></td> |
| 149 | <td align="left">F28</td> |
| 150 | <td align="left">ghc-hakyll</td> |
| 151 | <td>2018-08-31</td> |
| 152 | </tr><tr><td align="left">Fedora</td> |
| 153 | <td align="left"><a href="https://lwn.net/Articles/764018/">FEDORA-2018-33fef25ed1</a></td> |
| 154 | <td align="left">F28</td> |
| 155 | <td align="left">ghc-hs-bibutils</td> |
| 156 | <td>2018-08-31</td> |
| 157 | </tr><tr><td align="left">Fedora</td> |
| 158 | <td align="left"><a href="https://lwn.net/Articles/764019/">FEDORA-2018-07083800ac</a></td> |
| 159 | <td align="left">F28</td> |
| 160 | <td align="left">ghostscript</td> |
| 161 | <td>2018-09-02</td> |
| 162 | </tr><tr><td align="left">Fedora</td> |
| 163 | <td align="left"><a href="https://lwn.net/Articles/764020/">FEDORA-2018-77e610115a</a></td> |
| 164 | <td align="left">F28</td> |
| 165 | <td align="left">mariadb</td> |
| 166 | <td>2018-08-31</td> |
| 167 | </tr><tr><td align="left">Fedora</td> |
| 168 | <td align="left"><a href="https://lwn.net/Articles/764021/">FEDORA-2018-33fef25ed1</a></td> |
| 169 | <td align="left">F28</td> |
| 170 | <td align="left">pandoc-citeproc</td> |
| 171 | <td>2018-08-31</td> |
| 172 | </tr><tr><td align="left">Fedora</td> |
| 173 | <td align="left"><a href="https://lwn.net/Articles/764022/">FEDORA-2018-f2b24ce26e</a></td> |
| 174 | <td align="left">F28</td> |
| 175 | <td align="left">phpMyAdmin</td> |
| 176 | <td>2018-08-31</td> |
| 177 | </tr><tr><td align="left">Fedora</td> |
| 178 | <td align="left"><a href="https://lwn.net/Articles/764023/">FEDORA-2018-915602df63</a></td> |
| 179 | <td align="left">F27</td> |
| 180 | <td align="left">xen</td> |
| 181 | <td>2018-08-31</td> |
| 182 | </tr><tr><td align="left">Mageia</td> |
| 183 | <td align="left"><a href="https://lwn.net/Articles/764024/">MGASA-2018-0366</a></td> |
| 184 | <td align="left">6</td> |
| 185 | <td align="left">java-1.8.0-openjdk</td> |
| 186 | <td>2018-09-02</td> |
| 187 | </tr><tr><td align="left">Mageia</td> |
| 188 | <td align="left"><a href="https://lwn.net/Articles/764025/">MGASA-2018-0361</a></td> |
| 189 | <td align="left">6</td> |
| 190 | <td align="left">libarchive</td> |
| 191 | <td>2018-08-31</td> |
| 192 | </tr><tr><td align="left">Mageia</td> |
| 193 | <td align="left"><a href="https://lwn.net/Articles/764026/">MGASA-2018-0367</a></td> |
| 194 | <td align="left">6</td> |
| 195 | <td align="left">libgd</td> |
| 196 | <td>2018-09-02</td> |
| 197 | </tr><tr><td align="left">Mageia</td> |
| 198 | <td align="left"><a href="https://lwn.net/Articles/764027/">MGASA-2018-0356</a></td> |
| 199 | <td align="left">6</td> |
| 200 | <td align="left">libraw</td> |
| 201 | <td>2018-08-31</td> |
| 202 | </tr><tr><td align="left">Mageia</td> |
| 203 | <td align="left"><a href="https://lwn.net/Articles/764028/">MGASA-2018-0364</a></td> |
| 204 | <td align="left">6</td> |
| 205 | <td align="left">libxcursor</td> |
| 206 | <td>2018-08-31</td> |
| 207 | </tr><tr><td align="left">Mageia</td> |
| 208 | <td align="left"><a href="https://lwn.net/Articles/764029/">MGASA-2018-0359</a></td> |
| 209 | <td align="left">5</td> |
| 210 | <td align="left">mariadb</td> |
| 211 | <td>2018-08-31</td> |
| 212 | </tr><tr><td align="left">Mageia</td> |
| 213 | <td align="left"><a href="https://lwn.net/Articles/764030/">MGASA-2018-0355</a></td> |
| 214 | <td align="left">5, 6</td> |
| 215 | <td align="left">mercurial</td> |
| 216 | <td>2018-08-31</td> |
| 217 | </tr><tr><td align="left">Mageia</td> |
| 218 | <td align="left"><a href="https://lwn.net/Articles/764031/">MGASA-2018-0363</a></td> |
| 219 | <td align="left">6</td> |
| 220 | <td align="left">openssh</td> |
| 221 | <td>2018-08-31</td> |
| 222 | </tr><tr><td align="left">Mageia</td> |
| 223 | <td align="left"><a href="https://lwn.net/Articles/764032/">MGASA-2018-0365</a></td> |
| 224 | <td align="left">6</td> |
| 225 | <td align="left">openssl</td> |
| 226 | <td>2018-09-02</td> |
| 227 | </tr><tr><td align="left">Mageia</td> |
| 228 | <td align="left"><a href="https://lwn.net/Articles/764033/">MGASA-2018-0358</a></td> |
| 229 | <td align="left">6</td> |
| 230 | <td align="left">poppler</td> |
| 231 | <td>2018-08-31</td> |
| 232 | </tr><tr><td align="left">Mageia</td> |
| 233 | <td align="left"><a href="https://lwn.net/Articles/764034/">MGASA-2018-0362</a></td> |
| 234 | <td align="left">6</td> |
| 235 | <td align="left">quazip</td> |
| 236 | <td>2018-08-31</td> |
| 237 | </tr><tr><td align="left">Mageia</td> |
| 238 | <td align="left"><a href="https://lwn.net/Articles/764035/">MGASA-2018-0357</a></td> |
| 239 | <td align="left">6</td> |
| 240 | <td align="left">squirrelmail</td> |
| 241 | <td>2018-08-31</td> |
| 242 | </tr><tr><td align="left">Mageia</td> |
| 243 | <td align="left"><a href="https://lwn.net/Articles/764036/">MGASA-2018-0360</a></td> |
| 244 | <td align="left">6</td> |
| 245 | <td align="left">virtualbox</td> |
| 246 | <td>2018-08-31</td> |
| 247 | </tr><tr><td align="left">openSUSE</td> |
| 248 | <td align="left"><a href="https://lwn.net/Articles/764037/">openSUSE-SU-2018:2590-1</a></td> |
| 249 | <td align="left">42.3</td> |
| 250 | <td align="left">cobbler</td> |
| 251 | <td>2018-09-03</td> |
| 252 | </tr><tr><td align="left">openSUSE</td> |
| 253 | <td align="left"><a href="https://lwn.net/Articles/764038/">openSUSE-SU-2018:2592-1</a></td> |
| 254 | <td align="left">15.0</td> |
| 255 | <td align="left">libressl</td> |
| 256 | <td>2018-09-03</td> |
| 257 | </tr><tr><td align="left">openSUSE</td> |
| 258 | <td align="left"><a href="https://lwn.net/Articles/764039/">openSUSE-SU-2018:2587-1</a></td> |
| 259 | <td align="left">42.3</td> |
| 260 | <td align="left">wireshark</td> |
| 261 | <td>2018-09-02</td> |
| 262 | </tr><tr><td align="left">openSUSE</td> |
| 263 | <td align="left"><a href="https://lwn.net/Articles/764040/">openSUSE-SU-2018:2591-1</a></td> |
| 264 | <td align="left">15.0 42.3</td> |
| 265 | <td align="left">zutils</td> |
| 266 | <td>2018-09-03</td> |
| 267 | </tr><tr><td align="left">SUSE</td> |
| 268 | <td align="left"><a href="https://lwn.net/Articles/764044/">SUSE-SU-2018:2576-1</a></td> |
| 269 | <td align="left">OS7 </td> |
| 270 | <td align="left">OpenStack</td> |
| 271 | <td>2018-08-31</td> |
| 272 | </tr><tr><td align="left">SUSE</td> |
| 273 | <td align="left"><a href="https://lwn.net/Articles/764041/">SUSE-SU-2018:2578-1</a></td> |
| 274 | <td align="left">OS7 </td> |
| 275 | <td align="left">couchdb</td> |
| 276 | <td>2018-08-31</td> |
| 277 | </tr><tr><td align="left">SUSE</td> |
| 278 | <td align="left"><a href="https://lwn.net/Articles/764042/">SUSE-SU-2018:2574-1</a></td> |
| 279 | <td align="left">SLE11</td> |
| 280 | <td align="left">java-1_7_0-ibm</td> |
| 281 | <td>2018-08-31</td> |
| 282 | </tr><tr><td align="left">SUSE</td> |
| 283 | <td align="left"><a href="https://lwn.net/Articles/764043/">SUSE-SU-2018:2583-1</a></td> |
| 284 | <td align="left">SLE11</td> |
| 285 | <td align="left">java-1_7_1-ibm</td> |
| 286 | <td>2018-08-31</td> |
| 287 | </tr><tr><td align="left">SUSE</td> |
| 288 | <td align="left"><a href="https://lwn.net/Articles/764045/">SUSE-SU-2018:2584-1</a></td> |
| 289 | <td align="left">SLE12</td> |
| 290 | <td align="left">spice</td> |
| 291 | <td>2018-08-31</td> |
| 292 | </tr></table> |
| 293 | <hr width="60%" align="left"> |
| 294 | (<a href="https://lwn.net/Login/?target=/Articles/764046/">Log in</a> to post comments) |
| 295 | <p> |
| 296 | |
| 297 | </div> <!-- ArticleText --> |
| 298 | <p><a name="Comments"></a> |
| 299 | |
| 300 | </div> <!-- ArticleText --> |
| 301 | </div> |
| 302 | <div class="lwn-u-1 pure-u-md-1-6 not-print"> |
| 303 | <div id="azk93271_right_zone"></div> |
| 304 | </div> |
| 305 | </div> <!-- pure-grid --> |
| 306 | |
| 307 | <br clear="all"> |
| 308 | <center> |
| 309 | <P> |
| 310 | <font size="-2"> |
| 311 | Copyright © 2018, Eklektix, Inc.<BR> |
| 312 | |
| 313 | Comments and public postings are copyrighted by their creators.<br> |
| 314 | Linux is a registered trademark of Linus Torvalds<br> |
| 315 | </font> |
| 316 | </center> |
| 317 | |
| 318 | <script type="text/javascript"> |
| 319 | var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); |
| 320 | document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); |
| 321 | </script> |
| 322 | <script type="text/javascript"> |
| 323 | try { |
| 324 | var pageTracker = _gat._getTracker("UA-2039382-1"); |
| 325 | pageTracker._trackPageview(); |
| 326 | } catch(err) {}</script> |
| 327 | |
| 328 | </body></html> |
| 329 | |