| 1 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" |
| 2 | "http://www.w3.org/TR/html4/loose.dtd"> |
| 3 | <html> |
| 4 | <head><title>Security updates for Thursday [LWN.net]</title> |
| 5 | <meta name="twitter:card" content="summary" /> |
| 6 | <meta name="twitter:site" content="@lwnnet" /> |
| 7 | <meta name="twitter:title" content="Security updates for Thursday" /> |
| 8 | <meta name="twitter:description" content="Security updates have been issued by Debian (curl, gdm3, git-annex, lcms2, and sympa), Fedora (discount, dolphin-emu, gd, obs-build, osc, tcpflow, and yara), openSUSE (wireshark), Slackware (curl, firefox, ghostscript, and thunderbird), SUSE (apache-pdfbox, curl, dovecot22, and libvirt), and Ubuntu (libtirpc). |
| 9 | " /> |
| 10 | <meta name="viewport" content="width=device-width, initial-scale=1"> |
| 11 | <meta HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8"> |
| 12 | <link rel="icon" href="/images/favicon.png" type="image/png"> |
| 13 | <link rel="alternate" type="application/rss+xml" title="LWN.net headlines" href="https://lwn.net/headlines/newrss"> |
| 14 | <link rel="stylesheet" href="/CSS/lwn"> |
| 15 | <link rel="stylesheet" href="/CSS/nosub"> |
| 16 | <link rel="stylesheet" href="/CSS/pure-min"> |
| 17 | <!--[if lte IE 8]> |
| 18 | <link rel="stylesheet" href="/CSS/grids-responsive-old-ie-min"> |
| 19 | <![endif]--> |
| 20 | <!--[if gt IE 8]><!--> |
| 21 | <link rel="stylesheet" href="/CSS/grids-responsive-min"> |
| 22 | <!--<![endif]--> |
| 23 | <link rel="stylesheet" href="/CSS/pure-lwn"> |
| 24 | |
| 25 | |
| 26 | <script type="text/javascript">var p="http",d="static";if(document.location.protocol=="https:"){p+="s";d="engine";}var z=document.createElement("script");z.type="text/javascript";z.async=true;z.src=p+"://"+d+".adzerk.net/ados.js";var s=document.getElementsByTagName("script")[0];s.parentNode.insertBefore(z,s);</script> |
| 27 | <script type="text/javascript"> |
| 28 | var ados_keywords = ados_keywords || []; |
| 29 | if( location.protocol=='https:' ) { |
| 30 | ados_keywords.push('T:SSL'); |
| 31 | } else { |
| 32 | ados_keywords.push('T:HTTP'); |
| 33 | } |
| 34 | |
| 35 | var ados = ados || {}; |
| 36 | ados.run = ados.run || []; |
| 37 | ados.run.push(function() { |
| 38 | |
| 39 | ados_add_placement(4669, 20979, "azk13321_leaderboard", 4).setZone(16026); |
| 40 | |
| 41 | ados_add_placement(4669, 20979, "azk93271_right_zone", [5,10,6]).setZone(16027); |
| 42 | |
| 43 | ados_add_placement(4669, 20979, "azk31017_tracking", 20).setZone(20995); |
| 44 | |
| 45 | |
| 46 | |
| 47 | ados_setKeywords(ados_keywords.join(', ')); |
| 48 | ados_load(); |
| 49 | });</script> |
| 50 | |
| 51 | </head> |
| 52 | <body bgcolor="#ffffff" link="Blue" VLINK="Green" alink="Green"> |
| 53 | <a name="t"></a> |
| 54 | <div id="menu"><a href="/"><img src="https://static.lwn.net/images/logo/barepenguin-70.png" class="logo" |
| 55 | border="0" alt="LWN.net Logo"> |
| 56 | <font class="logo">LWN<br>.net</font> |
| 57 | <font class="logobl">News from the source</font></a> |
| 58 | <a href="/"><img src="https://static.lwn.net/images/lcorner-ss.png" class="sslogo" |
| 59 | border="0" alt="LWN"></a><div class="navmenu-container"> |
| 60 | <ul class="navmenu"> |
| 61 | <li><a class="navmenu" href="#t"><b>Content</b></a><ul><li><a href="/current/">Weekly Edition</a></li><li><a href="/Archives/">Archives</a></li><li><a href="/Search/">Search</a></li><li><a href="/Kernel/">Kernel</a></li><li><a href="/Security/">Security</a></li><li><a href="/Distributions/">Distributions</a></li><li><a href="/Calendar/">Events calendar</a></li><li><a href="/Comments/unread">Unread comments</a></li><li><hr></li><li><a href="/op/FAQ.lwn">LWN FAQ</a></li><li><a href="/op/AuthorGuide.lwn">Write for us</a></li></ul></li> |
| 62 | </ul></div> |
| 63 | </div> <!-- menu --> |
| 64 | <div class="pure-g not-handset" style="margin-left: 10.5em"> |
| 65 | <div class="not-print"> |
| 66 | <div id="azk13321_leaderboard"></div> |
| 67 | </div> |
| 68 | </div> |
| 69 | <div class="topnav-container"> |
| 70 | <div class="not-handset"><form action="https://lwn.net/Login/" method="post" name="loginform" |
| 71 | class="loginform"> |
| 72 | <b>User:</b> <input type="text" name="Username" value="" size="8" /> <b>Password:</b> <input type="password" name="Password" size="8" /> <input type="hidden" name="target" value="/Articles/764300/" /> <input type="submit" name="submit" value="Log in" /></form> | |
| 73 | <form action="https://lwn.net/subscribe/" method="post" class="loginform"> |
| 74 | <input type="submit" name="submit" value="Subscribe" /> |
| 75 | </form> | |
| 76 | <form action="https://lwn.net/Login/newaccount" method="post" class="loginform"> |
| 77 | <input type="submit" name="submit" value="Register" /> |
| 78 | </form> |
| 79 | </div> |
| 80 | <div class="handset-only"> |
| 81 | <a href="/subscribe/"><b>Subscribe</b></a> / |
| 82 | <a href="/Login/"><b>Log in</b></a> / |
| 83 | <a href="/Login/newaccount"><b>New account</b></a> |
| 84 | </div> |
| 85 | </div><div class="pure-grid maincolumn"> |
| 86 | <div class="lwn-u-1 pure-u-md-19-24"> |
| 87 | <div class="PageHeadline"> |
| 88 | <h1>Security updates for Thursday</h1> |
| 89 | </div> |
| 90 | <div class="ArticleText"> |
| 91 | <table class="OddEven"> |
| 92 | <tr><th align="left">Dist.</th> |
| 93 | <th align="left">ID</th> |
| 94 | <th align="left">Release</th> |
| 95 | <th align="left">Package</th> |
| 96 | <th align="left">Date</th></tr> |
| 97 | <tr><td align="left">Debian</td> |
| 98 | <td align="left"><a href="https://lwn.net/Articles/764275/">DSA-4286-1</a></td> |
| 99 | <td align="left">stable</td> |
| 100 | <td align="left">curl</td> |
| 101 | <td>2018-09-05</td> |
| 102 | </tr><tr><td align="left">Debian</td> |
| 103 | <td align="left"><a href="https://lwn.net/Articles/764276/">DLA-1494-1</a></td> |
| 104 | <td align="left">LTS</td> |
| 105 | <td align="left">gdm3</td> |
| 106 | <td>2018-09-05</td> |
| 107 | </tr><tr><td align="left">Debian</td> |
| 108 | <td align="left"><a href="https://lwn.net/Articles/764277/">DLA-1495-1</a></td> |
| 109 | <td align="left">LTS</td> |
| 110 | <td align="left">git-annex</td> |
| 111 | <td>2018-09-05</td> |
| 112 | </tr><tr><td align="left">Debian</td> |
| 113 | <td align="left"><a href="https://lwn.net/Articles/764278/">DLA-1496-1</a></td> |
| 114 | <td align="left">LTS</td> |
| 115 | <td align="left">lcms2</td> |
| 116 | <td>2018-09-06</td> |
| 117 | </tr><tr><td align="left">Debian</td> |
| 118 | <td align="left"><a href="https://lwn.net/Articles/764279/">DSA-4285-1</a></td> |
| 119 | <td align="left">stable</td> |
| 120 | <td align="left">sympa</td> |
| 121 | <td>2018-09-05</td> |
| 122 | </tr><tr><td align="left">Fedora</td> |
| 123 | <td align="left"><a href="https://lwn.net/Articles/764280/">FEDORA-2018-38bdbafa96</a></td> |
| 124 | <td align="left">F28</td> |
| 125 | <td align="left">discount</td> |
| 126 | <td>2018-09-06</td> |
| 127 | </tr><tr><td align="left">Fedora</td> |
| 128 | <td align="left"><a href="https://lwn.net/Articles/764281/">FEDORA-2018-fe437a98d6</a></td> |
| 129 | <td align="left">F27</td> |
| 130 | <td align="left">dolphin-emu</td> |
| 131 | <td>2018-09-06</td> |
| 132 | </tr><tr><td align="left">Fedora</td> |
| 133 | <td align="left"><a href="https://lwn.net/Articles/764282/">FEDORA-2018-5bf744beee</a></td> |
| 134 | <td align="left">F28</td> |
| 135 | <td align="left">gd</td> |
| 136 | <td>2018-09-06</td> |
| 137 | </tr><tr><td align="left">Fedora</td> |
| 138 | <td align="left"><a href="https://lwn.net/Articles/764283/">FEDORA-2018-fac5420dd1</a></td> |
| 139 | <td align="left">F27</td> |
| 140 | <td align="left">obs-build</td> |
| 141 | <td>2018-09-06</td> |
| 142 | </tr><tr><td align="left">Fedora</td> |
| 143 | <td align="left"><a href="https://lwn.net/Articles/764284/">FEDORA-2018-fac5420dd1</a></td> |
| 144 | <td align="left">F27</td> |
| 145 | <td align="left">osc</td> |
| 146 | <td>2018-09-06</td> |
| 147 | </tr><tr><td align="left">Fedora</td> |
| 148 | <td align="left"><a href="https://lwn.net/Articles/764285/">FEDORA-2018-4f0b7d1251</a></td> |
| 149 | <td align="left">F27</td> |
| 150 | <td align="left">tcpflow</td> |
| 151 | <td>2018-09-06</td> |
| 152 | </tr><tr><td align="left">Fedora</td> |
| 153 | <td align="left"><a href="https://lwn.net/Articles/764286/">FEDORA-2018-5ad77cc979</a></td> |
| 154 | <td align="left">F28</td> |
| 155 | <td align="left">tcpflow</td> |
| 156 | <td>2018-09-06</td> |
| 157 | </tr><tr><td align="left">Fedora</td> |
| 158 | <td align="left"><a href="https://lwn.net/Articles/764287/">FEDORA-2018-7626df1731</a></td> |
| 159 | <td align="left">F27</td> |
| 160 | <td align="left">yara</td> |
| 161 | <td>2018-09-06</td> |
| 162 | </tr><tr><td align="left">Fedora</td> |
| 163 | <td align="left"><a href="https://lwn.net/Articles/764288/">FEDORA-2018-8344cb89ac</a></td> |
| 164 | <td align="left">F28</td> |
| 165 | <td align="left">yara</td> |
| 166 | <td>2018-09-06</td> |
| 167 | </tr><tr><td align="left">openSUSE</td> |
| 168 | <td align="left"><a href="https://lwn.net/Articles/764289/">openSUSE-SU-2018:2628-1</a></td> |
| 169 | <td align="left">15.0</td> |
| 170 | <td align="left">wireshark</td> |
| 171 | <td>2018-09-05</td> |
| 172 | </tr><tr><td align="left">Slackware</td> |
| 173 | <td align="left"><a href="https://lwn.net/Articles/764290/">SSA:2018-249-01</a></td> |
| 174 | <td align="left"></td> |
| 175 | <td align="left">curl</td> |
| 176 | <td>2018-09-06</td> |
| 177 | </tr><tr><td align="left">Slackware</td> |
| 178 | <td align="left"><a href="https://lwn.net/Articles/764292/">SSA:2018-249-03</a></td> |
| 179 | <td align="left"></td> |
| 180 | <td align="left">firefox</td> |
| 181 | <td>2018-09-06</td> |
| 182 | </tr><tr><td align="left">Slackware</td> |
| 183 | <td align="left"><a href="https://lwn.net/Articles/764291/">SSA:2018-249-02</a></td> |
| 184 | <td align="left"></td> |
| 185 | <td align="left">ghostscript</td> |
| 186 | <td>2018-09-06</td> |
| 187 | </tr><tr><td align="left">Slackware</td> |
| 188 | <td align="left"><a href="https://lwn.net/Articles/764293/">SSA:2018-249-04</a></td> |
| 189 | <td align="left"></td> |
| 190 | <td align="left">thunderbird</td> |
| 191 | <td>2018-09-06</td> |
| 192 | </tr><tr><td align="left">SUSE</td> |
| 193 | <td align="left"><a href="https://lwn.net/Articles/764294/">SUSE-SU-2018:2630-1</a></td> |
| 194 | <td align="left">SLE15</td> |
| 195 | <td align="left">apache-pdfbox</td> |
| 196 | <td>2018-09-06</td> |
| 197 | </tr><tr><td align="left">SUSE</td> |
| 198 | <td align="left"><a href="https://lwn.net/Articles/764295/">SUSE-SU-2018:2629-1</a></td> |
| 199 | <td align="left"></td> |
| 200 | <td align="left">curl</td> |
| 201 | <td>2018-09-05</td> |
| 202 | </tr><tr><td align="left">SUSE</td> |
| 203 | <td align="left"><a href="https://lwn.net/Articles/764296/">SUSE-SU-2018:2632-1</a></td> |
| 204 | <td align="left">OS7 SLE12</td> |
| 205 | <td align="left">dovecot22</td> |
| 206 | <td>2018-09-06</td> |
| 207 | </tr><tr><td align="left">SUSE</td> |
| 208 | <td align="left"><a href="https://lwn.net/Articles/764297/">SUSE-SU-2018:2631-1</a></td> |
| 209 | <td align="left">OS7 SLE12</td> |
| 210 | <td align="left">libvirt</td> |
| 211 | <td>2018-09-06</td> |
| 212 | </tr><tr><td align="left">Ubuntu</td> |
| 213 | <td align="left"><a href="https://lwn.net/Articles/764298/">USN-3759-2</a></td> |
| 214 | <td align="left">12.04</td> |
| 215 | <td align="left">libtirpc</td> |
| 216 | <td>2018-09-05</td> |
| 217 | </tr><tr><td align="left">Ubuntu</td> |
| 218 | <td align="left"><a href="https://lwn.net/Articles/764299/">USN-3759-1</a></td> |
| 219 | <td align="left">14.04 16.04 18.04</td> |
| 220 | <td align="left">libtirpc</td> |
| 221 | <td>2018-09-05</td> |
| 222 | </tr></table> |
| 223 | <hr width="60%" align="left"> |
| 224 | (<a href="https://lwn.net/Login/?target=/Articles/764300/">Log in</a> to post comments) |
| 225 | <p> |
| 226 | |
| 227 | </div> <!-- ArticleText --> |
| 228 | <p><a name="Comments"></a> |
| 229 | |
| 230 | </div> <!-- ArticleText --> |
| 231 | </div> |
| 232 | <div class="lwn-u-1 pure-u-md-1-6 not-print"> |
| 233 | <div id="azk93271_right_zone"></div> |
| 234 | </div> |
| 235 | </div> <!-- pure-grid --> |
| 236 | |
| 237 | <br clear="all"> |
| 238 | <center> |
| 239 | <P> |
| 240 | <font size="-2"> |
| 241 | Copyright © 2018, Eklektix, Inc.<BR> |
| 242 | |
| 243 | Comments and public postings are copyrighted by their creators.<br> |
| 244 | Linux is a registered trademark of Linus Torvalds<br> |
| 245 | </font> |
| 246 | </center> |
| 247 | |
| 248 | <script type="text/javascript"> |
| 249 | var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); |
| 250 | document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); |
| 251 | </script> |
| 252 | <script type="text/javascript"> |
| 253 | try { |
| 254 | var pageTracker = _gat._getTracker("UA-2039382-1"); |
| 255 | pageTracker._trackPageview(); |
| 256 | } catch(err) {}</script> |
| 257 | |
| 258 | </body></html> |
| 259 | |