1 <!DOCTYPE HTML PUBLIC
"-//W3C//DTD HTML 4.01 Transitional//EN"
2 "http://www.w3.org/TR/html4/loose.dtd">
4 <head><title>Security updates for Thursday [LWN.net]
</title>
5 <meta name=
"twitter:card" content=
"summary" />
6 <meta name=
"twitter:site" content=
"@lwnnet" />
7 <meta name=
"twitter:title" content=
"Security updates for Thursday" />
8 <meta name=
"twitter:description" content=
"Security updates have been issued by Debian (curl, gdm3, git-annex, lcms2, and sympa), Fedora (discount, dolphin-emu, gd, obs-build, osc, tcpflow, and yara), openSUSE (wireshark), Slackware (curl, firefox, ghostscript, and thunderbird), SUSE (apache-pdfbox, curl, dovecot22, and libvirt), and Ubuntu (libtirpc).
10 <meta name=
"viewport" content=
"width=device-width, initial-scale=1">
11 <meta HTTP-EQUIV=
"Content-Type" CONTENT=
"text/html; charset=utf-8">
12 <link rel=
"icon" href=
"/images/favicon.png" type=
"image/png">
13 <link rel=
"alternate" type=
"application/rss+xml" title=
"LWN.net headlines" href=
"https://lwn.net/headlines/newrss">
14 <link rel=
"stylesheet" href=
"/CSS/lwn">
15 <link rel=
"stylesheet" href=
"/CSS/nosub">
16 <link rel=
"stylesheet" href=
"/CSS/pure-min">
18 <link rel="stylesheet" href="/CSS/grids-responsive-old-ie-min">
20 <!--[if gt IE 8]><!-->
21 <link rel="stylesheet" href="/CSS/grids-responsive-min">
23 <link rel=
"stylesheet" href=
"/CSS/pure-lwn">
26 <script type=
"text/javascript">var
p=
"http",
d=
"static";if(document.location.protocol==
"https:"){p+=
"s";
d=
"engine";}var z=document.createElement(
"script");z.
type=
"text/javascript";z.async=true;z.src=p+
"://"+d+
".adzerk.net/ados.js";var s=document.getElementsByTagName(
"script")[
0];s.parentNode.insertBefore(z,s);
</script>
27 <script type=
"text/javascript">
28 var ados_keywords = ados_keywords || [];
29 if( location.protocol=='https:' ) {
30 ados_keywords.push('T:SSL');
32 ados_keywords.push('T:HTTP');
35 var ados = ados || {};
36 ados.run = ados.run || [];
37 ados.run.push(function() {
39 ados_add_placement(
4669,
20979,
"azk13321_leaderboard",
4).setZone(
16026);
41 ados_add_placement(
4669,
20979,
"azk93271_right_zone", [
5,
10,
6]).setZone(
16027);
43 ados_add_placement(
4669,
20979,
"azk31017_tracking",
20).setZone(
20995);
47 ados_setKeywords(ados_keywords.join(', '));
52 <body bgcolor=
"#ffffff" link=
"Blue" VLINK=
"Green" alink=
"Green">
54 <div id=
"menu"><a href=
"/"><img src=
"https://static.lwn.net/images/logo/barepenguin-70.png" class=
"logo"
55 border=
"0" alt=
"LWN.net Logo">
56 <font class=
"logo">LWN
<br>.net
</font>
57 <font class=
"logobl">News from the source
</font></a>
58 <a href=
"/"><img src=
"https://static.lwn.net/images/lcorner-ss.png" class=
"sslogo"
59 border=
"0" alt=
"LWN"></a><div class=
"navmenu-container">
61 <li><a class=
"navmenu" href=
"#t"><b>Content
</b></a><ul><li><a href=
"/current/">Weekly Edition
</a></li><li><a href=
"/Archives/">Archives
</a></li><li><a href=
"/Search/">Search
</a></li><li><a href=
"/Kernel/">Kernel
</a></li><li><a href=
"/Security/">Security
</a></li><li><a href=
"/Distributions/">Distributions
</a></li><li><a href=
"/Calendar/">Events calendar
</a></li><li><a href=
"/Comments/unread">Unread comments
</a></li><li><hr></li><li><a href=
"/op/FAQ.lwn">LWN FAQ
</a></li><li><a href=
"/op/AuthorGuide.lwn">Write for us
</a></li></ul></li>
64 <div class=
"pure-g not-handset" style=
"margin-left: 10.5em">
65 <div class=
"not-print">
66 <div id=
"azk13321_leaderboard"></div>
69 <div class=
"topnav-container">
70 <div class=
"not-handset"><form action=
"https://lwn.net/Login/" method=
"post" name=
"loginform"
72 <b>User:
</b> <input type=
"text" name=
"Username" value=
"" size=
"8" /> <b>Password:
</b> <input type=
"password" name=
"Password" size=
"8" /> <input type=
"hidden" name=
"target" value=
"/Articles/764300/" /> <input type=
"submit" name=
"submit" value=
"Log in" /></form> |
73 <form action=
"https://lwn.net/subscribe/" method=
"post" class=
"loginform">
74 <input type=
"submit" name=
"submit" value=
"Subscribe" />
76 <form action=
"https://lwn.net/Login/newaccount" method=
"post" class=
"loginform">
77 <input type=
"submit" name=
"submit" value=
"Register" />
80 <div class=
"handset-only">
81 <a href=
"/subscribe/"><b>Subscribe
</b></a> /
82 <a href=
"/Login/"><b>Log in
</b></a> /
83 <a href=
"/Login/newaccount"><b>New account
</b></a>
85 </div><div class=
"pure-grid maincolumn">
86 <div class=
"lwn-u-1 pure-u-md-19-24">
87 <div class=
"PageHeadline">
88 <h1>Security updates for Thursday
</h1>
90 <div class=
"ArticleText">
91 <table class=
"OddEven">
92 <tr><th align=
"left">Dist.
</th>
93 <th align=
"left">ID
</th>
94 <th align=
"left">Release
</th>
95 <th align=
"left">Package
</th>
96 <th align=
"left">Date
</th></tr>
97 <tr><td align=
"left">Debian
</td>
98 <td align=
"left"><a href=
"https://lwn.net/Articles/764275/">DSA-
4286-
1</a></td>
99 <td align=
"left">stable
</td>
100 <td align=
"left">curl
</td>
102 </tr><tr><td align=
"left">Debian
</td>
103 <td align=
"left"><a href=
"https://lwn.net/Articles/764276/">DLA-
1494-
1</a></td>
104 <td align=
"left">LTS
</td>
105 <td align=
"left">gdm3
</td>
107 </tr><tr><td align=
"left">Debian
</td>
108 <td align=
"left"><a href=
"https://lwn.net/Articles/764277/">DLA-
1495-
1</a></td>
109 <td align=
"left">LTS
</td>
110 <td align=
"left">git-annex
</td>
112 </tr><tr><td align=
"left">Debian
</td>
113 <td align=
"left"><a href=
"https://lwn.net/Articles/764278/">DLA-
1496-
1</a></td>
114 <td align=
"left">LTS
</td>
115 <td align=
"left">lcms2
</td>
117 </tr><tr><td align=
"left">Debian
</td>
118 <td align=
"left"><a href=
"https://lwn.net/Articles/764279/">DSA-
4285-
1</a></td>
119 <td align=
"left">stable
</td>
120 <td align=
"left">sympa
</td>
122 </tr><tr><td align=
"left">Fedora
</td>
123 <td align=
"left"><a href=
"https://lwn.net/Articles/764280/">FEDORA-
2018-
38bdbafa96
</a></td>
124 <td align=
"left">F28
</td>
125 <td align=
"left">discount
</td>
127 </tr><tr><td align=
"left">Fedora
</td>
128 <td align=
"left"><a href=
"https://lwn.net/Articles/764281/">FEDORA-
2018-fe437a98d6
</a></td>
129 <td align=
"left">F27
</td>
130 <td align=
"left">dolphin-emu
</td>
132 </tr><tr><td align=
"left">Fedora
</td>
133 <td align=
"left"><a href=
"https://lwn.net/Articles/764282/">FEDORA-
2018-
5bf744beee
</a></td>
134 <td align=
"left">F28
</td>
135 <td align=
"left">gd
</td>
137 </tr><tr><td align=
"left">Fedora
</td>
138 <td align=
"left"><a href=
"https://lwn.net/Articles/764283/">FEDORA-
2018-fac5420dd1
</a></td>
139 <td align=
"left">F27
</td>
140 <td align=
"left">obs-build
</td>
142 </tr><tr><td align=
"left">Fedora
</td>
143 <td align=
"left"><a href=
"https://lwn.net/Articles/764284/">FEDORA-
2018-fac5420dd1
</a></td>
144 <td align=
"left">F27
</td>
145 <td align=
"left">osc
</td>
147 </tr><tr><td align=
"left">Fedora
</td>
148 <td align=
"left"><a href=
"https://lwn.net/Articles/764285/">FEDORA-
2018-
4f0b7d1251
</a></td>
149 <td align=
"left">F27
</td>
150 <td align=
"left">tcpflow
</td>
152 </tr><tr><td align=
"left">Fedora
</td>
153 <td align=
"left"><a href=
"https://lwn.net/Articles/764286/">FEDORA-
2018-
5ad77cc979
</a></td>
154 <td align=
"left">F28
</td>
155 <td align=
"left">tcpflow
</td>
157 </tr><tr><td align=
"left">Fedora
</td>
158 <td align=
"left"><a href=
"https://lwn.net/Articles/764287/">FEDORA-
2018-
7626df1731
</a></td>
159 <td align=
"left">F27
</td>
160 <td align=
"left">yara
</td>
162 </tr><tr><td align=
"left">Fedora
</td>
163 <td align=
"left"><a href=
"https://lwn.net/Articles/764288/">FEDORA-
2018-
8344cb89ac
</a></td>
164 <td align=
"left">F28
</td>
165 <td align=
"left">yara
</td>
167 </tr><tr><td align=
"left">openSUSE
</td>
168 <td align=
"left"><a href=
"https://lwn.net/Articles/764289/">openSUSE-SU-
2018:
2628-
1</a></td>
169 <td align=
"left">15.0</td>
170 <td align=
"left">wireshark
</td>
172 </tr><tr><td align=
"left">Slackware
</td>
173 <td align=
"left"><a href=
"https://lwn.net/Articles/764290/">SSA:
2018-
249-
01</a></td>
174 <td align=
"left"></td>
175 <td align=
"left">curl
</td>
177 </tr><tr><td align=
"left">Slackware
</td>
178 <td align=
"left"><a href=
"https://lwn.net/Articles/764292/">SSA:
2018-
249-
03</a></td>
179 <td align=
"left"></td>
180 <td align=
"left">firefox
</td>
182 </tr><tr><td align=
"left">Slackware
</td>
183 <td align=
"left"><a href=
"https://lwn.net/Articles/764291/">SSA:
2018-
249-
02</a></td>
184 <td align=
"left"></td>
185 <td align=
"left">ghostscript
</td>
187 </tr><tr><td align=
"left">Slackware
</td>
188 <td align=
"left"><a href=
"https://lwn.net/Articles/764293/">SSA:
2018-
249-
04</a></td>
189 <td align=
"left"></td>
190 <td align=
"left">thunderbird
</td>
192 </tr><tr><td align=
"left">SUSE
</td>
193 <td align=
"left"><a href=
"https://lwn.net/Articles/764294/">SUSE-SU-
2018:
2630-
1</a></td>
194 <td align=
"left">SLE15
</td>
195 <td align=
"left">apache-pdfbox
</td>
197 </tr><tr><td align=
"left">SUSE
</td>
198 <td align=
"left"><a href=
"https://lwn.net/Articles/764295/">SUSE-SU-
2018:
2629-
1</a></td>
199 <td align=
"left"></td>
200 <td align=
"left">curl
</td>
202 </tr><tr><td align=
"left">SUSE
</td>
203 <td align=
"left"><a href=
"https://lwn.net/Articles/764296/">SUSE-SU-
2018:
2632-
1</a></td>
204 <td align=
"left">OS7 SLE12
</td>
205 <td align=
"left">dovecot22
</td>
207 </tr><tr><td align=
"left">SUSE
</td>
208 <td align=
"left"><a href=
"https://lwn.net/Articles/764297/">SUSE-SU-
2018:
2631-
1</a></td>
209 <td align=
"left">OS7 SLE12
</td>
210 <td align=
"left">libvirt
</td>
212 </tr><tr><td align=
"left">Ubuntu
</td>
213 <td align=
"left"><a href=
"https://lwn.net/Articles/764298/">USN-
3759-
2</a></td>
214 <td align=
"left">12.04</td>
215 <td align=
"left">libtirpc
</td>
217 </tr><tr><td align=
"left">Ubuntu
</td>
218 <td align=
"left"><a href=
"https://lwn.net/Articles/764299/">USN-
3759-
1</a></td>
219 <td align=
"left">14.04 16.04 18.04</td>
220 <td align=
"left">libtirpc
</td>
223 <hr width=
"60%" align=
"left">
224 (
<a href=
"https://lwn.net/Login/?target=/Articles/764300/">Log in
</a> to post comments)
227 </div> <!-- ArticleText -->
228 <p><a name=
"Comments"></a>
230 </div> <!-- ArticleText -->
232 <div class=
"lwn-u-1 pure-u-md-1-6 not-print">
233 <div id=
"azk93271_right_zone"></div>
235 </div> <!-- pure-grid -->
241 Copyright
© 2018, Eklektix, Inc.
<BR>
243 Comments and public postings are copyrighted by their creators.
<br>
244 Linux is a registered trademark of Linus Torvalds
<br>
248 <script type=
"text/javascript">
249 var gaJsHost = ((
"https:" == document.location.protocol) ?
"https://ssl." :
"http://www.");
250 document.write(unescape(
"%3Cscript src='" + gaJsHost +
"google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
252 <script type=
"text/javascript">
254 var pageTracker = _gat._getTracker(
"UA-2039382-1");
255 pageTracker._trackPageview();
256 } catch(err) {}
</script>