Friday's security updates

CentOS has updated mariadb (C7: multiple vulnerabilities).

Debian has updated ntp (multiple vulnerabilities) and postgresql-9.1 (multiple vulnerabilities).

Fedora has updated kernel (F21: multiple vulnerabilities) and php (F20; F21: multiple vulnerabilities).

Gentoo has updated mpg123 (code execution).

Mageia has updated cabextract (M4: denial of service), hexchat (M4: SSL spoofing), vlc (M4: multiple vulnerabilities), vorbis-tools (M4: denial of service), and zarafa (M4: denial of service).

Mandriva has updated aircrack-ng (BS1: multiple vulnerabilities), binutils (BS1: multiple vulnerabilities), bugzilla (BS1: command injection), busybox (BS1: arbitrary module loading), jasper (BS1: multiple vulnerabilities), java-1.7.0-openjdk (BS1: multiple vulnerabilities), libvirt (BS1: information leak), php (BS1: multiple vulnerabilities), python-django (BS1: multiple vulnerabilities), and vorbis-tools (BS1: denial of service).

openSUSE has updated libvirt (13.1, 13.2: access control bypass) and xen (13.1: multiple vulnerabilities).

Red Hat has updated java-1.5.0-ibm (RHEL5,6: multiple vulnerabilities), java-1.6.0-ibm (RHEL5,6: multiple vulnerabilities), java-1.7.0-ibm (RHEL5: multiple vulnerabilities), and java-1.7.1-ibm (RHEL6,7: multiple vulnerabilities).