Security advisories for Wednesday

Arch Linux has updated firefox (multiple vulnerabilities).

CentOS has updated kernel (C7:two vulnerabilities) and libreswan (C7: denial of service).

Debian has updated freeimage (integer overflow) and php-horde (cross-site request forgery).

openSUSE has updated audiofile(Leap42.1, 13.2, 13.1: buffer overflow), bouncycastle (Leap42.1, 13.2, 13.1: invalidcurve attack), java-1_7_0-openjdk (13.2; 13.1:multiple vulnerabilities), java-1_8_0-openjdk (13.2: multiplevulnerabilities), postgresql93 (13.2: twovulnerabilities), potrace (Leap42.1, 13.2,13.1: denial of service), roundcubemail(13.2, 13.1: two vulnerabilities), sudo(13.2, 13.1: information disclosure), util-linux (Leap42.1, 13.2, 13.1: denial ofservice), and wpa_supplicant (13.2: denial of service).

Oracle has updated kernel (OL7:two vulnerabilities) and libreswan (OL7: denial of service).

Red Hat has updated nss, nspr(RHEL5: code execution), firefox(RHEL5,6,7: multiple vulnerabilities), kernel (RHEL7: two vulnerabilities),kernel-rt (RHEL7; RHEMRG2.5: two vulnerabilities), libreswan (RHEL7: denial of service), and nss, nss-util, nspr (RHEL6,7: code execution).

SUSE has updated krb5 (SLE12; SLE11SP3,4: multiple vulnerabilities) and xen (SLE12: multiple vulnerabilities).

Ubuntu has updated xscreensaver(12.04: denial of service).