Friday's security updates

Arch Linux has updated chromium (multiple vulnerabilities), flashplugin (multiple vulnerabilities), lib32-flashplugin (multiple vulnerabilities), and libksba (denial of service).

CentOS has updated thunderbird (C7: multiple vulnerabilities).

Debian has updated libxstream-java (XML external-entity attack).

Debian-LTS has updated libgwenhywfar (outdated CA certificates) and libuser (multiple vulnerabilities).

Fedora has updated glibc(F23: denial of service).

Mageia has updated flash-player-plugin (M5: multiple vulnerabilities) and mercurial (M5: code execution).

openSUSE has updated libxml2(Leap 42.1: denial of service) and ntp(Leap 42.1: multiple vulnerabilities).

Oracle has updated kernel(O7: privilege escalation) and thunderbird (O7; O6: multiple vulnerabilities).

Red Hat has updated chromium-browser (RHEL6: multiple vulnerabilities), docker (RHEL7: privilege escalation), flash-plugin (RHEL 5,6: multiple vulnerabilities), and openshift (RHOSE 3.2: multiple vulnerabilities).

SUSE has updated java-1_7_1-ibm (SLE12; SLE11: multiple vulnerabilities),ntp (SLE12: multiple vulnerabilities), and openssl (SLE11, SSO1.3, SOSC5, SMP2.1, SM2.1: multiple vulnerabilities).