Friday's security updates

Arch Linux has updated chromium (multiple vulnerabilities) and webkit2gtk (multiple vulnerabilities).

Debian has updated libidn (multiple vulnerabilities).

Debian-LTS has updated mailman (password disclosure).

Fedora has updated canl-c (F24; F23: proxy manipulation), krb5 (F23: denial of service), libksba (F24: denial of service), openvpn (F23: information disclosure), tomcat (F24; F23: denial of service), and webkitgtk4 (F23: multiple vulnerabilities).

openSUSE has updated karchive (SLE12: command execution).

Oracle has updated ipa (O7; O6: denial of service).