Tuesday's security updates

CentOS has updated tomcat6 (C6: two vulnerabilities, one from 2013).

Debian has updated acpi-support (regression in earlier security fix).

Gentoo has updated libssh (key disclosure via bad randomness).

Mageia has updated drupal (denial of service), kdelibs4 (M3: authorization bypass), openssl (multiple vulnerabilities), wireshark (multiple vulnerabilities), and wordpress (multiple vulnerabilities).

Oracle has updated kernel-2.6.32 (OL6; OL5: denial of service), kernel-2.6.39 (OL6; OL5: denial of service), kernel-3.8.13 (OL7; OL6: two vulnerabilities), and tomcat6 (OL6: two vulnerabilities, one from 2013).

Red Hat has updated java-1.7.0-ibm (RHEL5&6: many vulnerabilities), java-1.7.1-ibm (RHEL7: many vulnerabilities), and tomcat6 (RHEL6: two vulnerabilities, one from 2013).

Scientific Linux has updated tomcat6 (SL6: two vulnerabilities, one from 2013).

Ubuntu has updated python-pycadf (14.04: information leak).