Wednesday's security advisories
CentOS has updated xulrunner (C6: multiple vulnerabilities), thunderbird (C6: multiple vulnerabilities), and firefox (C6: multiple vulnerabilities).

Debian has updated zendframework (information leak).

Fedora has updated php-pear-CAS (F17; F16: missing CN validation of CAS server certificate) and v8 (F16: multiple vulnerabilities).

Gentoo has updated haproxy (code execution), tor (multiple vulnerabilities), dhcpcd (code execution), bzip2 (code execution), isc dhcp (multiple vulnerabilities), and dokuwiki (multiple vulnerabilities).

Mandriva has updated firefox (multiple vulnerabilities).

Oracle has updated thunderbird (OL6: multiple vulnerabilities) and firefox (OL6: multiple vulnerabilities).

Red Hat has updated firefox (multiple vulnerabilities), thunderbird (multiple vulnerabilities), openshift-origin-node-util (multiple vulnerabilities), and flash-plugin (code execution).

Ubuntu has updated firefox (multiple vulnerabilities) and thunderbird (multiple vulnerabilities).