Friday's security updates

CentOS has updated Xen4CentOS kernel (multiple vulnerabilities).

Fedora has updated kernel (F19; F18: two vulnerabilities) and python-django (F19: cross-site scripting).

Gentoo has updated acroread (many vulnerabilities) and dbus (denial of service).

Mageia has updated libtiff (two code execution flaws), perl-Proc-ProcessTable (symlink flaw from 2011), python-django (cross-site scripting), python3 (two vulnerabilities), rubygem-passenger (M3: insecure tmpfile usage), spice (denial of service), and znc (M3: denial of service).

Mandriva has updated perl-Proc-ProcessTable (symlink flaw from 2011), python-django (ES5: cross-site scripting), and spice (BS1: denial of service).

openSUSE has updated cacti (12.2, 12.3: two vulnerabilities) and strongswan (11.4: denial of service).

Oracle has updated kernel (OL5: multiple vulnerabilities).

SUSE has updated firefox (multiple vulnerabilities).