Thursday's security advisories
Debian-LTS has updated icu (codeexecution) and roundcube (threevulnerabilities, one each from 2015 and 2014).
openSUSE has updated libsrtp(42.1: denial of service from 2015), libstorage (42.1: password disclosure), and libtcnative-1-0 (42.1: cipher downgrade from 2015).
Red Hat has updated Kibana(RHOS3: two vulnerabilities).
Scientific Linux has updated thunderbird (multiple vulnerabilities).
SUSE has updated java-1_7_1-ibm(SLE11: three unspecified vulnerabilities).