Security advisories for Monday

Arch Linux has updated thunderbird (code execution).

CentOS has updated ipa (C7; C6: denial of service) and thunderbird (C7; C6; C5: code execution).

Debian has updated chromium-browser (multiple vulnerabilities), flex (regression in previous update), and kernel (multiple vulnerabilities).

Debian-LTS has updated jsch (path traversal), kernel (multiple vulnerabilities), and tiff3 (multiple vulnerabilities).

Fedora has updated ca-certificates (F23: certificate update), ganglia (F24; F23: cross-site scripting), glibc (F23: denial of service), kernel (F24; F23: two vulnerabilities), lcms2 (F23: heap memory leak), and phpMyAdmin (F24: multiple vulnerabilities).

openSUSE has updated curl (13.2: three vulnerabilities), dosfstools (Leap42.1: two vulnerabilities), eog (Leap42.1, 13.2: out-of-bounds write), and xerces-c (Leap42.1: two vulnerabilities).

Oracle has updated thunderbird (OL7; OL6: code execution).

Red Hat has updated kernel (RHEL6.7; RHEL6.5: information leak) and thunderbird (RHEL5,6,7: code execution).

Scientific Linux has updated ipa (SL6,7: denial of service).

SUSE has updated kernel (SOSC5, SMP2.1, SM2.1, SLE11-SP3: multiple vulnerabilities).