This week we look security updates for a heap of packages including Firefox & Thunderbird, PHP & QEMU, plus we discuss Facebook's recent password storage incident as well as some listener hardening tips and more.