Monday's security updates
Arch Linux has updated mediawiki (multiple vulnerabilities), nghttp2 (code execution), and thunderbird (multiple vulnerabilities).
Debian-LTS has updated cacti (SQLinjection), libpng (multiple vulnerabilities), and libxml2 (multiple vulnerabilities).
Fedora has updated activemq (F23:unsafe deserialization), openstack-swift-plugin-swift3 (F23: replayattack), and samba (F22: multiple vulnerabilities).
openSUSE has updated bind (13.2, 13.1; Leap42.1: denial of service), cups-filters (13.2: command execution), ffmpeg (Leap42.1: multiple vulnerabilities),grub2 (13.2, 13.1: code execution), gummi (Leap42.1, 13.2, 13.1: predictablefilenames in /tmp), krb5 (Leap42.1: memorycorruption regression), libxml2 (13.2, 13.1:multiple vulnerabilities), polarssl (13.2:code execution), Qt (Leap42.1: multiplevulnerabilities), subversion (13.2, 13.1:(code execution), subversion (Leap42.1:three vulnerabilities), and xulrunner(Leap42.1: multiple vulnerabilities).
SUSE has updated bind (SLE12-SP1:denial of service).