Security advisories for Wednesday

CentOS has updated firefox (C6; C5: multiple vulnerabilities), librsvg2 (C6: fixes a regression in previous update), and thunderbird (C6; C5: multiple vulnerabilities).

Debian has updated horde3 (code execution) and mumble (multiple vulnerabilities).

Fedora has updated flite (F20; F19: insecure temporary files), openstack-nova (F20; F19: information leak), and tntnet (F20: information leak).

Gentoo has updated banshee (privilege escalation from 2010).

Mageia has updated flash-player-plugin (code execution), hplip (multiple vulnerabilities), and pidgin (multiple vulnerabilities).

Oracle has updated firefox (OL6: multiple vulnerabilities) and thunderbird (OL6: multiple vulnerabilities).

Red Hat has updated firefox (RHEL5&6: multiple vulnerabilities), flash-plugin (code execution), java-1.5.0-ibm (multiple vulnerabilities), java-1.6.0-ibm (multiple vulnerabilities), java-1.7.0-ibm (multiple vulnerabilities), and thunderbird (RHEL5&6: multiple vulnerabilities).

Scientific Linux has updated firefox (SL5&6: multiple vulnerabilities), thunderbird (SL5&6: multiple vulnerabilities), and librsvg2 (SL6: fixes a regression in previous update).

Ubuntu has updated libyaml (13.10, 12.10, 12.04 LTS: code execution).