Here a roundup of last week's Linux security updates for CentOS, Debian GNU/Linux, Fedora Linux, Gentoo Linux, Oracle Linux, Red Hat Enterprise Linux, and SUSE Linux.
CentOS
- CESA-2020:5618 Important CentOS 7 thunderbird Security Update
- CESA-2020:5437 Important CentOS 7 kernel Security Update
Debian
- DLA 2502-1: postsrsd security update
- DLA 2503-1: node-ini security update
- DSA 4797-2: webkit2gtk regression update
- ELA-300-2 openjdk-8 regression update
- DLA 2504-1: mediawiki security update
- ELA-335-1 flac security update
- DLA 2412-2: openjdk-8 regression update
- DLA 2506-1: awstats security update
- DLA 2505-1: spip security update
- DSA 4818-1: sympa security update
- DSA 4819-1: kitty security update
- DLA 2488-2: python-apt regression update
Fedora
- Fedora 32 Update: firefox-84.0-6.fc32
- Fedora 32 Update: phpldapadmin-1.2.6.2-1.fc32
- Fedora 32 Update: curl-7.69.1-7.fc32
- Fedora 32 Update: chromium-87.0.4280.88-1.fc32
- Fedora 33 Update: phpldapadmin-1.2.6.2-1.fc33
- Fedora 33 Update: openjpeg2-2.3.1-10.fc33
- Fedora 33 Update: mingw-openjpeg2-2.3.1-11.fc33
- Fedora 33 Update: gdm-3.38.2.1-1.fc33
- Fedora 33 Update: pngcheck-2.4.0-5.fc33
- Fedora 32 Update: mbedtls-2.16.9-1.fc32
- Fedora 32 Update: pngcheck-2.4.0-5.fc32
- Fedora 32 Update: xen-4.13.2-5.fc32
- Fedora 33 Update: xen-4.14.0-14.fc33
- Fedora 33 Update: libmaxminddb-1.4.3-1.fc33
- Fedora 32 Update: libmaxminddb-1.4.3-1.fc32
- Fedora 33 Update: mingw-binutils-2.34-4.fc33
- Fedora 33 Update: mediawiki-1.35.1-1.fc33
- Fedora 32 Update: mingw-binutils-2.32-8.fc32
- Fedora 32 Update: thunderbird-78.6.0-1.fc32
Gentoo Linux
- GLSA 202012-21 : Mozilla Network Security Service (NSS): Denial of service
- GLSA 202012-20 : Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities
- GLSA 202012-19 : PowerDNS Recursor: Denial of service
- GLSA 202012-18 : PowerDNS: information disclosure
- GLSA 202012-17 : D-Bus: Denial of service
- GLSA 202012-16 : PHP: Multiple vulnerabilities
- GLSA 202012-15 : GDK-PixBuf: Denial of service
- GLSA 202012-14 : cURL: Multiple vulnerabilities
- GLSA 202012-13 : OpenSSL: Denial of service
- GLSA 202012-12 : libass: User-assisted execution of arbitrary code
- GLSA 202012-11 : c-ares: Denial of service
- GLSA 202012-10 : WebkitGTK+: Multiple vulnerabilities
- GLSA 202012-09 : Cherokee: Multiple vulnerabilities
- GLSA 202012-22 : HAProxy: Arbitrary code execution
- GLSA 202012-24 : Samba: Multiple vulnerabilities
- GLSA 202012-23 : Apache Tomcat: Information disclosure
Oracle Linux
- New Ksplice updates for Oracle Enhanced RHCK 7 (ELBA-2020-5437-1)
- ELSA-2020-5619-1 Important: Oracle Linux 8 postgresql:9.6 security update
- ELBA-2020-5451 Oracle Linux 7 scap-security-guide bug fix and enhancement update (aarch64)
- ELSA-2020-5483 Moderate: Oracle Linux 8 gnutls security and bug fix update
- ELSA-2020-5487 Moderate: Oracle Linux 8 pacemaker security update
- ELSA-2020-5567-1 Important: Oracle Linux 8 postgresql:10 security update
- ELSA-2020-5493 Moderate: Oracle Linux 8 go-toolset:ol8 security update
- ELSA-2020-5620-1 Important: Oracle Linux 8 postgresql:12 security update
- New Ksplice updates for RHCK 8 (ELSA-2020-5473)
Red Hat Enterprise Linux
- RHSA-2020:5637-01: Important: openssl security update
- RHSA-2020:5638-01: Important: libpq security update
- RHSA-2020:5614-01: Important: OpenShift Container Platform 4.6.9 security and bug fix update
- RHSA-2020:5645-01: Important: thunderbird security update
- RHSA-2020:5640-01: Important: openssl security update
- RHSA-2020:5615-01: Important: OpenShift Container Platform 4.6.9 packages and security update
- RHSA-2020:5639-01: Important: openssl security update
- RHSA-2020:5641-01: Important: openssl security update
- RHSA-2020:5642-01: Important: openssl security update
- RHSA-2020:5644-01: Important: thunderbird security update
- RHSA-2020:5649-01: Low: Red Hat OpenShift Service Mesh 1.1.11 security update
- RHSA-2020:5660-01: Moderate: mariadb-connector-c security, bug fix, and enhancement update
- RHSA-2020:5655-01: Moderate: mariadb-connector-c security, bug fix, and enhancement update
- RHSA-2020:5654-01: Important: mariadb:10.3 security, bug fix, and enhancement update
- RHSA-2020:5661-01: Important: postgresql:9.6 security update
- RHSA-2020:5656-01: Moderate: kernel security update
- RHSA-2020:5664-01: Important: postgresql:10 security update
- RHSA-2020:5662-01: Moderate: mariadb-connector-c security, bug fix, and enhancement update
- RHSA-2020:5663-01: Important: mariadb:10.3 security, bug fix, and enhancement update
- RHSA-2020:5665-01: Important: mariadb:10.3 security, bug fix, and enhancement update
SUSE Linux
- openSUSE-SU-2020:2300-1: moderate: Security update for gcc7
- openSUSE-SU-2020:2301-1: moderate: Security update for gcc7
- openSUSE-SU-2020:2298-1: moderate: Security update for openssh
- openSUSE-SU-2020:2310-1: important: Security update for webkit2gtk3
- openSUSE-SU-2020:2304-1: important: Security update for webkit2gtk3
- openSUSE-SU-2020:2317-1: critical: Security update for MozillaThunderbird
- openSUSE-SU-2020:2315-1: important: Security update for MozillaFirefox
- openSUSE-SU-2020:2318-1: critical: Security update for MozillaFirefox
- openSUSE-SU-2020:2313-1: moderate: Security update for xen
- openSUSE-SU-2020:2314-1: moderate: Security update for ovmf
- openSUSE-SU-2020:2324-1: critical: Security update for MozillaThunderbird
- openSUSE-SU-2020:2325-1: critical: Security update for MozillaFirefox
- openSUSE-SU-2020:2332-1: important: Security update for python3
- openSUSE-SU-2020:2343-1: important: Security update for kdeconnect-kde
- openSUSE-SU-2020:2336-1: moderate: Security update for ovmf
- openSUSE-SU-2020:2337-1: moderate: Security update for blosc
- openSUSE-SU-2020:2334-1: important: Security update for kdeconnect-kde
- openSUSE-SU-2020:2333-1: important: Security update for python3
- openSUSE-SU-2020:2327-1: important: Security update for ceph
- openSUSE-SU-2020:2331-1: moderate: Security update for xen
