Security advisories for Wednesday

Arch Linux has updated firefox (multiple vulnerabilities).

CentOS has updated bind (C7: denial of service), firefox (C7: two vulnerabilities), firefox (C6; C5; C7: multiple vulnerabilities), xulrunner (C7: multiple vulnerabilities), flac (C7; C6: two vulnerabilities), freetype (C7: multiple vulnerabilities), ipa (C7: two vulnerabilities), slapi-nis (C7: two vulnerabilities), kernel (C7: two vulnerabilities), libxml2 (C7: denial of service), openssl (C7: multiple vulnerabilities), postgresql (C7: multiple vulnerabilities), setroubleshoot (C7: privilege escalation), thunderbird (C7; C7: multiple vulnerabilities), and unzip (C7: multiple vulnerabilities).

Debian has updated wireshark (multiple vulnerabilities).

Debian-LTS has updated freetype (many vulnerabilities).

Fedora has updated drupal7-entity (F21; F20: cross-site scripting) and php (F20: multiple vulnerabilities).

Mageia has updated chromium-browser-stable (multiple vulnerabilities), owncloud (unspecified vulnerabilities), python-rope (code execution), and tor (denial of service).

Oracle has updated firefox (OL7; OL6: multiple vulnerabilities) and flac (OL7; OL6: two vulnerabilities).

Red Hat has updated firefox (RHEL5,6,7: multiple vulnerabilities), flac (RHEL6,7: two vulnerabilities), and thunderbird (RHEL5,6,7: multiple vulnerabilities).

Scientific Linux has updated firefox (SL5,6,7: multiple vulnerabilities) and flac (SL6,7: two vulnerabilities).

Ubuntu has updated firefox (14.10, 14.04, 12.04: multiple vulnerabilities), gnupg, gnupg2 (14.10, 14.04, 12.04, 10.04: multiple vulnerabilities), libgcrypt11, libgcrypt20 (14.10, 14.04, 12.04, 10.04: information leak), and tiff (14.10, 14.04, 12.04, 10.04: multiple vulnerabilities).