Security advisories for Tuesday

Arch Linux has updated thunderbird (code execution).

CentOS has updated ipa (C7; C6: denialof service) and thunderbird (C7; C6; C5: code execution).

Debian has updated chromium-browser (multiple vulnerabilities),flex (regression in previous update), andkernel (multiple vulnerabilities).

Debian-LTS has updated jsch (path traversal), kernel (multiple vulnerabilities), and tiff3 (multiple vulnerabilities).

Fedora has updated ca-certificates (F23: certificate update),ganglia (F24; F23: cross-site scripting), glibc (F23: denial of service), kernel(F24; F23:two vulnerabilities), lcms2 (F23: heapmemory leak), and phpMyAdmin (F24: multiple vulnerabilities).

openSUSE has updated curl (13.2:three vulnerabilities), dosfstools(Leap42.1: two vulnerabilities), eog(Leap42.1, 13.2: out-of-bounds write), and xerces-c (Leap42.1: two vulnerabilities).

Oracle has updated thunderbird (OL7; OL6: codeexecution).

Red Hat has updated kernel (RHEL6.7; RHEL6.5: information leak) and thunderbird (RHEL5,6,7: code execution).

Scientific Linux has updated ipa(SL6,7: denial of service).

SUSE has updated kernel (SOSC5,SMP2.1, SM2.1, SLE11-SP3: multiple vulnerabilities).