Security advisories for Thursday

Debian has updated xen (multiple vulnerabilities, onefrom 2015).

Debian-LTS has updated tardiff(two vulnerabilities from 2015).

Fedora has updated httpd (F23:HTTP redirect), libarchive (F24: codeexecution), and libvirt (F23:authentication bypass).

openSUSE has updated dropbear(42.1, 13.2: multiple vulnerabilities), go (13.2: HTTP requestsmuggling flaws from 2015), karchive (42.1,13.2: code execution), mbedtls (42.1: threevulnerabilities), python (42.1, 13.2: threevulnerabilities), and tiff (13.2: multiple vulnerabilities).

Oracle has updated java-1.7.0-openjdk (OL7; OL6; OL5: multiple vulnerabilities).

Scientific Linux has updated java-1.7.0-openjdk (multiple vulnerabilities).