1 <!DOCTYPE HTML PUBLIC
"-//W3C//DTD HTML 4.01 Transitional//EN"
2 "http://www.w3.org/TR/html4/loose.dtd">
4 <head><title>Security updates for Monday [LWN.net]
</title>
5 <meta name=
"twitter:card" content=
"summary" />
6 <meta name=
"twitter:site" content=
"@lwnnet" />
7 <meta name=
"twitter:title" content=
"Security updates for Monday" />
8 <meta name=
"twitter:description" content=
"Security updates have been issued by Debian (dojo, libtirpc, mariadb-10.0, php5, ruby-json-jwt, spice, spice-gtk, tomcat8, and trafficserver), Fedora (ghc-hakyll, ghc-hs-bibutils, ghostscript, mariadb, pandoc-citeproc, phpMyAdmin, and xen), Mageia (java-1.8.0-openjdk, libarchive, libgd, libraw, libxcursor, mariadb, mercurial, openssh, openssl, poppler, quazip, squirrelmail, and virtualbox), openSUSE (cobbler, libressl, wireshark, and zutils), and SUSE (couchdb, java-1_7_0-ibm, java-1_7_1-ibm, OpenStack, and spice).
10 <meta name=
"viewport" content=
"width=device-width, initial-scale=1">
11 <meta HTTP-EQUIV=
"Content-Type" CONTENT=
"text/html; charset=utf-8">
12 <link rel=
"icon" href=
"/images/favicon.png" type=
"image/png">
13 <link rel=
"alternate" type=
"application/rss+xml" title=
"LWN.net headlines" href=
"https://lwn.net/headlines/newrss">
14 <link rel=
"stylesheet" href=
"/CSS/lwn">
15 <link rel=
"stylesheet" href=
"/CSS/nosub">
16 <link rel=
"stylesheet" href=
"/CSS/pure-min">
18 <link rel="stylesheet" href="/CSS/grids-responsive-old-ie-min">
20 <!--[if gt IE 8]><!-->
21 <link rel="stylesheet" href="/CSS/grids-responsive-min">
23 <link rel=
"stylesheet" href=
"/CSS/pure-lwn">
26 <script type=
"text/javascript">var
p=
"http",
d=
"static";if(document.location.protocol==
"https:"){p+=
"s";
d=
"engine";}var z=document.createElement(
"script");z.
type=
"text/javascript";z.async=true;z.src=p+
"://"+d+
".adzerk.net/ados.js";var s=document.getElementsByTagName(
"script")[
0];s.parentNode.insertBefore(z,s);
</script>
27 <script type=
"text/javascript">
28 var ados_keywords = ados_keywords || [];
29 if( location.protocol=='https:' ) {
30 ados_keywords.push('T:SSL');
32 ados_keywords.push('T:HTTP');
35 var ados = ados || {};
36 ados.run = ados.run || [];
37 ados.run.push(function() {
39 ados_add_placement(
4669,
20979,
"azk13321_leaderboard",
4).setZone(
16026);
41 ados_add_placement(
4669,
20979,
"azk93271_right_zone", [
5,
10,
6]).setZone(
16027);
43 ados_add_placement(
4669,
20979,
"azk31017_tracking",
20).setZone(
20995);
47 ados_setKeywords(ados_keywords.join(', '));
52 <body bgcolor=
"#ffffff" link=
"Blue" VLINK=
"Green" alink=
"Green">
54 <div id=
"menu"><a href=
"/"><img src=
"https://static.lwn.net/images/logo/barepenguin-70.png" class=
"logo"
55 border=
"0" alt=
"LWN.net Logo">
56 <font class=
"logo">LWN
<br>.net
</font>
57 <font class=
"logobl">News from the source
</font></a>
58 <a href=
"/"><img src=
"https://static.lwn.net/images/lcorner-ss.png" class=
"sslogo"
59 border=
"0" alt=
"LWN"></a><div class=
"navmenu-container">
61 <li><a class=
"navmenu" href=
"#t"><b>Content
</b></a><ul><li><a href=
"/current/">Weekly Edition
</a></li><li><a href=
"/Archives/">Archives
</a></li><li><a href=
"/Search/">Search
</a></li><li><a href=
"/Kernel/">Kernel
</a></li><li><a href=
"/Security/">Security
</a></li><li><a href=
"/Distributions/">Distributions
</a></li><li><a href=
"/Calendar/">Events calendar
</a></li><li><a href=
"/Comments/unread">Unread comments
</a></li><li><hr></li><li><a href=
"/op/FAQ.lwn">LWN FAQ
</a></li><li><a href=
"/op/AuthorGuide.lwn">Write for us
</a></li></ul></li>
64 <div class=
"pure-g not-handset" style=
"margin-left: 10.5em">
65 <div class=
"not-print">
66 <div id=
"azk13321_leaderboard"></div>
69 <div class=
"topnav-container">
70 <div class=
"not-handset"><form action=
"https://lwn.net/Login/" method=
"post" name=
"loginform"
72 <b>User:
</b> <input type=
"text" name=
"Username" value=
"" size=
"8" /> <b>Password:
</b> <input type=
"password" name=
"Password" size=
"8" /> <input type=
"hidden" name=
"target" value=
"/Articles/764046/" /> <input type=
"submit" name=
"submit" value=
"Log in" /></form> |
73 <form action=
"https://lwn.net/subscribe/" method=
"post" class=
"loginform">
74 <input type=
"submit" name=
"submit" value=
"Subscribe" />
76 <form action=
"https://lwn.net/Login/newaccount" method=
"post" class=
"loginform">
77 <input type=
"submit" name=
"submit" value=
"Register" />
80 <div class=
"handset-only">
81 <a href=
"/subscribe/"><b>Subscribe
</b></a> /
82 <a href=
"/Login/"><b>Log in
</b></a> /
83 <a href=
"/Login/newaccount"><b>New account
</b></a>
85 </div><div class=
"pure-grid maincolumn">
86 <div class=
"lwn-u-1 pure-u-md-19-24">
87 <div class=
"PageHeadline">
88 <h1>Security updates for Monday
</h1>
90 <div class=
"ArticleText">
91 <table class=
"OddEven">
92 <tr><th align=
"left">Dist.
</th>
93 <th align=
"left">ID
</th>
94 <th align=
"left">Release
</th>
95 <th align=
"left">Package
</th>
96 <th align=
"left">Date
</th></tr>
97 <tr><td align=
"left">Debian
</td>
98 <td align=
"left"><a href=
"https://lwn.net/Articles/764007/">DLA-
1492-
1</a></td>
99 <td align=
"left">LTS
</td>
100 <td align=
"left">dojo
</td>
102 </tr><tr><td align=
"left">Debian
</td>
103 <td align=
"left"><a href=
"https://lwn.net/Articles/764008/">DLA-
1487-
1</a></td>
104 <td align=
"left">LTS
</td>
105 <td align=
"left">libtirpc
</td>
107 </tr><tr><td align=
"left">Debian
</td>
108 <td align=
"left"><a href=
"https://lwn.net/Articles/764009/">DLA-
1488-
1</a></td>
109 <td align=
"left">LTS
</td>
110 <td align=
"left">mariadb-
10.0</td>
112 </tr><tr><td align=
"left">Debian
</td>
113 <td align=
"left"><a href=
"https://lwn.net/Articles/764010/">DLA-
1490-
1</a></td>
114 <td align=
"left">LTS
</td>
115 <td align=
"left">php5
</td>
117 </tr><tr><td align=
"left">Debian
</td>
118 <td align=
"left"><a href=
"https://lwn.net/Articles/764011/">DSA-
4283-
1</a></td>
119 <td align=
"left">stable
</td>
120 <td align=
"left">ruby-json-jwt
</td>
122 </tr><tr><td align=
"left">Debian
</td>
123 <td align=
"left"><a href=
"https://lwn.net/Articles/764013/">DLA-
1488-
1</a></td>
124 <td align=
"left">LTS
</td>
125 <td align=
"left">spice
</td>
127 </tr><tr><td align=
"left">Debian
</td>
128 <td align=
"left"><a href=
"https://lwn.net/Articles/764012/">DLA-
1486-
1</a></td>
129 <td align=
"left">LTS
</td>
130 <td align=
"left">spice
</td>
132 </tr><tr><td align=
"left">Debian
</td>
133 <td align=
"left"><a href=
"https://lwn.net/Articles/764014/">DLA-
1489-
1</a></td>
134 <td align=
"left">LTS
</td>
135 <td align=
"left">spice-gtk
</td>
137 </tr><tr><td align=
"left">Debian
</td>
138 <td align=
"left"><a href=
"https://lwn.net/Articles/764015/">DLA-
1491-
1</a></td>
139 <td align=
"left">LTS
</td>
140 <td align=
"left">tomcat8
</td>
142 </tr><tr><td align=
"left">Debian
</td>
143 <td align=
"left"><a href=
"https://lwn.net/Articles/764016/">DSA-
4282-
1</a></td>
144 <td align=
"left">stable
</td>
145 <td align=
"left">trafficserver
</td>
147 </tr><tr><td align=
"left">Fedora
</td>
148 <td align=
"left"><a href=
"https://lwn.net/Articles/764017/">FEDORA-
2018-
33fef25ed1
</a></td>
149 <td align=
"left">F28
</td>
150 <td align=
"left">ghc-hakyll
</td>
152 </tr><tr><td align=
"left">Fedora
</td>
153 <td align=
"left"><a href=
"https://lwn.net/Articles/764018/">FEDORA-
2018-
33fef25ed1
</a></td>
154 <td align=
"left">F28
</td>
155 <td align=
"left">ghc-hs-bibutils
</td>
157 </tr><tr><td align=
"left">Fedora
</td>
158 <td align=
"left"><a href=
"https://lwn.net/Articles/764019/">FEDORA-
2018-
07083800ac
</a></td>
159 <td align=
"left">F28
</td>
160 <td align=
"left">ghostscript
</td>
162 </tr><tr><td align=
"left">Fedora
</td>
163 <td align=
"left"><a href=
"https://lwn.net/Articles/764020/">FEDORA-
2018-
77e610115a
</a></td>
164 <td align=
"left">F28
</td>
165 <td align=
"left">mariadb
</td>
167 </tr><tr><td align=
"left">Fedora
</td>
168 <td align=
"left"><a href=
"https://lwn.net/Articles/764021/">FEDORA-
2018-
33fef25ed1
</a></td>
169 <td align=
"left">F28
</td>
170 <td align=
"left">pandoc-citeproc
</td>
172 </tr><tr><td align=
"left">Fedora
</td>
173 <td align=
"left"><a href=
"https://lwn.net/Articles/764022/">FEDORA-
2018-f2b24ce26e
</a></td>
174 <td align=
"left">F28
</td>
175 <td align=
"left">phpMyAdmin
</td>
177 </tr><tr><td align=
"left">Fedora
</td>
178 <td align=
"left"><a href=
"https://lwn.net/Articles/764023/">FEDORA-
2018-
915602df63
</a></td>
179 <td align=
"left">F27
</td>
180 <td align=
"left">xen
</td>
182 </tr><tr><td align=
"left">Mageia
</td>
183 <td align=
"left"><a href=
"https://lwn.net/Articles/764024/">MGASA-
2018-
0366</a></td>
184 <td align=
"left">6</td>
185 <td align=
"left">java-
1.8.0-openjdk
</td>
187 </tr><tr><td align=
"left">Mageia
</td>
188 <td align=
"left"><a href=
"https://lwn.net/Articles/764025/">MGASA-
2018-
0361</a></td>
189 <td align=
"left">6</td>
190 <td align=
"left">libarchive
</td>
192 </tr><tr><td align=
"left">Mageia
</td>
193 <td align=
"left"><a href=
"https://lwn.net/Articles/764026/">MGASA-
2018-
0367</a></td>
194 <td align=
"left">6</td>
195 <td align=
"left">libgd
</td>
197 </tr><tr><td align=
"left">Mageia
</td>
198 <td align=
"left"><a href=
"https://lwn.net/Articles/764027/">MGASA-
2018-
0356</a></td>
199 <td align=
"left">6</td>
200 <td align=
"left">libraw
</td>
202 </tr><tr><td align=
"left">Mageia
</td>
203 <td align=
"left"><a href=
"https://lwn.net/Articles/764028/">MGASA-
2018-
0364</a></td>
204 <td align=
"left">6</td>
205 <td align=
"left">libxcursor
</td>
207 </tr><tr><td align=
"left">Mageia
</td>
208 <td align=
"left"><a href=
"https://lwn.net/Articles/764029/">MGASA-
2018-
0359</a></td>
209 <td align=
"left">5</td>
210 <td align=
"left">mariadb
</td>
212 </tr><tr><td align=
"left">Mageia
</td>
213 <td align=
"left"><a href=
"https://lwn.net/Articles/764030/">MGASA-
2018-
0355</a></td>
214 <td align=
"left">5,
6</td>
215 <td align=
"left">mercurial
</td>
217 </tr><tr><td align=
"left">Mageia
</td>
218 <td align=
"left"><a href=
"https://lwn.net/Articles/764031/">MGASA-
2018-
0363</a></td>
219 <td align=
"left">6</td>
220 <td align=
"left">openssh
</td>
222 </tr><tr><td align=
"left">Mageia
</td>
223 <td align=
"left"><a href=
"https://lwn.net/Articles/764032/">MGASA-
2018-
0365</a></td>
224 <td align=
"left">6</td>
225 <td align=
"left">openssl
</td>
227 </tr><tr><td align=
"left">Mageia
</td>
228 <td align=
"left"><a href=
"https://lwn.net/Articles/764033/">MGASA-
2018-
0358</a></td>
229 <td align=
"left">6</td>
230 <td align=
"left">poppler
</td>
232 </tr><tr><td align=
"left">Mageia
</td>
233 <td align=
"left"><a href=
"https://lwn.net/Articles/764034/">MGASA-
2018-
0362</a></td>
234 <td align=
"left">6</td>
235 <td align=
"left">quazip
</td>
237 </tr><tr><td align=
"left">Mageia
</td>
238 <td align=
"left"><a href=
"https://lwn.net/Articles/764035/">MGASA-
2018-
0357</a></td>
239 <td align=
"left">6</td>
240 <td align=
"left">squirrelmail
</td>
242 </tr><tr><td align=
"left">Mageia
</td>
243 <td align=
"left"><a href=
"https://lwn.net/Articles/764036/">MGASA-
2018-
0360</a></td>
244 <td align=
"left">6</td>
245 <td align=
"left">virtualbox
</td>
247 </tr><tr><td align=
"left">openSUSE
</td>
248 <td align=
"left"><a href=
"https://lwn.net/Articles/764037/">openSUSE-SU-
2018:
2590-
1</a></td>
249 <td align=
"left">42.3</td>
250 <td align=
"left">cobbler
</td>
252 </tr><tr><td align=
"left">openSUSE
</td>
253 <td align=
"left"><a href=
"https://lwn.net/Articles/764038/">openSUSE-SU-
2018:
2592-
1</a></td>
254 <td align=
"left">15.0</td>
255 <td align=
"left">libressl
</td>
257 </tr><tr><td align=
"left">openSUSE
</td>
258 <td align=
"left"><a href=
"https://lwn.net/Articles/764039/">openSUSE-SU-
2018:
2587-
1</a></td>
259 <td align=
"left">42.3</td>
260 <td align=
"left">wireshark
</td>
262 </tr><tr><td align=
"left">openSUSE
</td>
263 <td align=
"left"><a href=
"https://lwn.net/Articles/764040/">openSUSE-SU-
2018:
2591-
1</a></td>
264 <td align=
"left">15.0 42.3</td>
265 <td align=
"left">zutils
</td>
267 </tr><tr><td align=
"left">SUSE
</td>
268 <td align=
"left"><a href=
"https://lwn.net/Articles/764044/">SUSE-SU-
2018:
2576-
1</a></td>
269 <td align=
"left">OS7
</td>
270 <td align=
"left">OpenStack
</td>
272 </tr><tr><td align=
"left">SUSE
</td>
273 <td align=
"left"><a href=
"https://lwn.net/Articles/764041/">SUSE-SU-
2018:
2578-
1</a></td>
274 <td align=
"left">OS7
</td>
275 <td align=
"left">couchdb
</td>
277 </tr><tr><td align=
"left">SUSE
</td>
278 <td align=
"left"><a href=
"https://lwn.net/Articles/764042/">SUSE-SU-
2018:
2574-
1</a></td>
279 <td align=
"left">SLE11
</td>
280 <td align=
"left">java-
1_7_0-ibm
</td>
282 </tr><tr><td align=
"left">SUSE
</td>
283 <td align=
"left"><a href=
"https://lwn.net/Articles/764043/">SUSE-SU-
2018:
2583-
1</a></td>
284 <td align=
"left">SLE11
</td>
285 <td align=
"left">java-
1_7_1-ibm
</td>
287 </tr><tr><td align=
"left">SUSE
</td>
288 <td align=
"left"><a href=
"https://lwn.net/Articles/764045/">SUSE-SU-
2018:
2584-
1</a></td>
289 <td align=
"left">SLE12
</td>
290 <td align=
"left">spice
</td>
293 <hr width=
"60%" align=
"left">
294 (
<a href=
"https://lwn.net/Login/?target=/Articles/764046/">Log in
</a> to post comments)
297 </div> <!-- ArticleText -->
298 <p><a name=
"Comments"></a>
300 </div> <!-- ArticleText -->
302 <div class=
"lwn-u-1 pure-u-md-1-6 not-print">
303 <div id=
"azk93271_right_zone"></div>
305 </div> <!-- pure-grid -->
311 Copyright
© 2018, Eklektix, Inc.
<BR>
313 Comments and public postings are copyrighted by their creators.
<br>
314 Linux is a registered trademark of Linus Torvalds
<br>
318 <script type=
"text/javascript">
319 var gaJsHost = ((
"https:" == document.location.protocol) ?
"https://ssl." :
"http://www.");
320 document.write(unescape(
"%3Cscript src='" + gaJsHost +
"google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
322 <script type=
"text/javascript">
324 var pageTracker = _gat._getTracker(
"UA-2039382-1");
325 pageTracker._trackPageview();
326 } catch(err) {}
</script>