Update zziplib packages has been released for openSUSE Leap 42.3 to address an issue if the size of the central directory is too big

Updated memcached packages has been released for both Debian GNU/Linux 8 and 9 This update fixes three security issues in memcached: 1) Daniel Shapira reported a heap-based buffer over-read in memcached (CVE-2017-9951). 2) It was reported that memcached listens to UDP by default. A remote attacker can take advantage of it to use the memcached service as a DDoS amplifier (CVE-2018-1000115). 3) An integer overflow was reported in memcached, resulting in resource leaks, data corruption, deadlocks or crashes (CVE-2018-1000127).

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues.

The following updates has been released for Ubuntu Linux:

An ocaml update has been released for openSUSE Leap 42.3 to address an integer overflow in the caml_ba_deserialize function. This allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted object.

Updated elfutils packages has been released for both Ubuntu 14.04 LTS and 16.04 LTS. This addresses an issue where elfutils could be made to crash or consume resources if it opened a specially crafted file.

A git security update has been released for Arch Linux. This update address two security issues: 1) CVE-2018-11233 (information disclosure). A security issue has been found in git before 2.17.1, where the code that sanify-check paths in is_ntfs_dotgit() could have been tricked into reading random pieces of memory. 2) CVE-2018-11235 (arbitrary code execution). With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because submodule "names" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with "../" in a name.

NVIDIA has released a new 390.67 Linux display driver

The following updates has been released for openSUSE:

The following updates has been released for Ubuntu Linux:

Dedoimedo published a review on Fedora 28

A beta version of the upcoming Linux Mint 19 is now available in Cinnamon, Xfce, and MATE editions. This is going to be a long term support release which will be supported until 2023

It was discovered that Exempi incorrectly handled certain media files. If a user or automated system were tricked into opening a specially crafted file, a remote attacker could cause Exempi to hang or crash, resulting in a denial of service, or possibly execute arbitrary code. Updated packages are now available for Ubuntu Linux 14.04 LTS, 16.04 LTS, and 17.10

The following updates has been released for Debian GNU/Linux:

Dedoimedo investigate wireless issues in CentOS 7.4

Updated prosody packages has been released for Debian GNU/Linux 8 and 9

Updated batik packages has been released for Debian GNU/Linux 8 and 9

The following updates has been released for CentOS:

New git packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues

Updated Zookeeper packages has been released for both Debian GNU/Linux 8 and 9