Friday's security updates

Arch Linux has updated botan (multiple vulnerabilities) and expat (code execution).

CentOS has updated java-1.7.0-openjdk (C6; C5; C7: sandbox bypass) and java-1.8.0-openjdk (C6; C7: sandbox bypass).

Fedora has updated php-pecl-http (F23: multiple vulnerabilities) and torbrowser-launcher (F23: signatureverification bypass).

Mageia has updated filezilla(M5: code execution), git (M5: code execution), iceape (M5: multiple vulnerabilities), krb5 (M5: null pointer dereference), libotr (M5: code execution), moodle (M5: multiple vulnerabilities), openafs (M5: multiple vulnerabilities), pidgin-otr (M5: code execution), webkit (M5: multiple vulnerabilities), and webkit2 (M5: multiple vulnerabilities).

openSUSE has updated quagga(Leap 42.1: code execution).

Oracle has updated java-1.7.0-openjdk (O7; O6; O5: sandbox bypass) and java-1.8.0-openjdk (O7; O6: sandbox bypass).

Red Hat has updated java-1.7.0-openjdk (RHEL6; RHEL7:sandbox bypass), java-1.7.0-oracle (RHEL7: sandbox bypass), java-1.8.0-openjdk (RHEL6, RHEL7: sandbox bypass), and java-1.8.0-oracle (RHEL7: sandbox bypass).

Scientific Linux has updated java-1.7.0-openjdk (SL6; SL7:sandbox bypass)and java-1.8.0-openjdk (SL6; SL7: sandbox bypass).

Ubuntu has updated openjdk-7(14.04, 15.10: sandbox bypass).