Security advisories for Monday

Arch Linux has updated squid (denial of service).

Debian has updated lhasa (code execution) and srtp (denial of service).

Fedora has updated apache-commons-collections (F23; F22: code execution), bind (F22: multiple vulnerabilities), bind99 (F22: multiple vulnerabilities), and NetworkManager (F23: multiple vulnerabilities).

Gentoo has updated qemu (multiple vulnerabilities) and xalan (code execution from 2014).

openSUSE has updated krb5 (13.2: null pointer dereference).

Oracle has updated openssh (OL5: two vulnerabilities).

Scientific Linux has updated krb5 (SL7: three vulnerabilities) and mariadb (SL7: multiple vulnerabilities).

Slackware has updated mercurial (three vulnerabilities) and php (multiple vulnerabilities).