Security advisories for Monday

Debian has updated icoutils (code execution), tomcat7 (information disclosure), and tomcat8 (information disclosure).

Fedora has updated FlightGear (F25; F24: fileoverwrites), libpng10 (F25; F24: NULL dereference bug),mingw-libpng (F25; F24: NULL dereference bug), openssh (F25: multiple vulnerabilities),php-swiftmailer (F25; F24: code execution), samba (F24: two vulnerabilities), sway(F25; F24:unspecified), and thunderbird (F24: multiple vulnerabilities).

Mageia has updated flightgear (file overwrites), libcryptopp (denial of service), and subversion (denial of service).

openSUSE has updated gstreamer-0_10-plugins-bad (42.2: three codeexecution vulnerabilities), gstreamer-plugins-bad (42.2: multiplevulnerabilities), gstreamer-plugins-good(42.2: multiple vulnerabilities), libcares2(42.2, 42.1: code execution), php5 (42.2,42.1: multiple vulnerabilities), php7(42.2: multiple vulnerabilities), syncthing, syncthing-gtk (42.2; 42.1:two vulnerabilities), tiff (42.2, 42.1: multiple vulnerabilities), and zlib (42.2; 42.1: multiple vulnerabilities).

SUSE has updated jasper(SLE12-SP1,SP2: multiple vulnerabilities).